19.1R3-S9: Software Release Notification

Alert Type

PSN - Product Support Notification

RiskRisk Description

Low/Notification

Software Release Notification

ImpactImpact Description

Low/Notification

Software Release Notification

Product Affected

ACX, MX, EX, PTX, QFX, vMX, vRR, NFX, SRX(excluded SRX-550M), vSRX.

Alert Description

Junos Software Service Release version 19.1R3-S9 is now available for download from the Junos software download site

Download Junos Software Service Release:

Go to Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as need and follow the prompts

Solution

Junos Software service Release version 19.1R3-S9 is now available.

19.1R3-S9 - List of Fixed issues

PR Number	Synopsis	Category: Category for platform-side analytics problem reports for EX
1436223	i40e NVM upgrade support for EX9200 platform Product-Group=junos	Added support for i40e NVM upgrade in EX9208.
PR Number	Synopsis	Category: Mojito PFE
1630935	Application of firewall filters might break connectivity towards the hosts on EX4300 Product-Group=junos	On EX4300 platforms except EX4300-MP/EX4300-48MP, once input/output firewall filters are applied to the interfaces under family ethernet-switching, it might result in disrupting the connectivity towards few hosts connected to the device and thus impacts the related traffic.
PR Number	Synopsis	Category: Bug category for Mojito Royale routing implementation
1655654	Few EX platforms does not generate ICMPv6 too big messages Product-Group=junos	Few EX platforms may not generate ICMPv6 too long messages which could cause the path MTU (maximum transmission unit) discovery to fail. As a result, IPv6 session establishment may fail.
PR Number	Synopsis	Category: Category for all the Sazerac & Macallan PFE PRs
1564941	The DHCP client might not obtain IP address when dhcp-security is configured Product-Group=junos	On EX2300 platforms, if enterprise Style (EP) and service provider (SP) style configurations are mixed on a trunk interface, the DHCP client under SP style configuration might not obtain IP address when dhcp-security is enabled on one of the trunk VLANs.
1653260	L2PT may not work for AE interfaces in Q-in-Q environment. Product-Group=junos	This issue Affects all EX-2300,EX-3400,EX-4300MP,EX4600,EX4600-40F. L2PT may not work for AE interfaces in Q-in-Q environment.
PR Number	Synopsis	Category: Category for all the Sazerac & Macallan platform related PRs
1627673	System time may not be updated after reboot on EX2300 platform Product-Group=junos	System time may not be updated after reboot. Symptoms seen are: 1) After USB image installation, CLI is not working fine. 2) When DHCP persistence is configured with DHCP security and device reboots, the lease time values may show a high lease value post reboot.
1649338	The VC port might not be formed automatically after Zeroize Product-Group=junos	On all EX3400/EX4400 platforms, the Virtual-Chassis (VC) port might not be formed automatically after executing the command "request system zeroize".
PR Number	Synopsis	Category: Any HW issues found in RIO chassis
1429047	On the ACX5448 platform, multiple hardware I2C failures might be observed because of the intermittent I2C access failures on the main board internal switches. A system reboot is required to clear this state. Product-Group=junos	On ACX5448 platform, multiple HW I2C failures might be observed because of intermittent I2C access failures on the main board internal switches. A system reboot is required to clear this state.
PR Number	Synopsis	Category: All issues related to QFX PFE CoS
1650051	The fixed classifier may not work in MPLS and VXLAN scenario Product-Group=junos	On QFX5100 platforms, traffic may not get classified based on a fixed classifier in MPLS as well as the VXLAN scenario.
PR Number	Synopsis	Category: PRs for Sflow on QFX 5100,5200, 5110
1598239	Sflow impacts on ICMP traffic on QFX5XXX platforms Product-Group=junos	On QFX5XXX platforms in sflow scenario, CPU/host bound ICMP traffic from or to the sampled interface might be dropped, which might have impact on services based on ICMP probes like RPM.
PR Number	Synopsis	Category: PRs for Subscriber Management Statistics daemon & libraries
1646846	The bbe-statsd daemon might crash after ISSU Product-Group=junos	On all MX platforms with the subscriber management scenario, when ISSU happens from pre 18.4 to post 18.4, subscribers that re-logged in pre 18.4 are called preNG subscribers. For any of the preNG subscribers, if the ipv4/ipv6 family interface goes up/down, the issue is triggered.
PR Number	Synopsis	Category: Rio platform interface issues
1401718	On the ACX5448 10-Gigabit, 40-Gigabit, and 100-Gigabit Ethernet interfaces, link fault signaling does not work. Product-Group=junos	Link fault signaling (LFS) feature is not supported on ACX5448 10/40/100GbE interfaces.
PR Number	Synopsis	Category: Ctrl Plane SW defects for Dvaita NPI (Node Virtualization)
1580168	MPC7E/8E/9E/11E line card might be stuck in "Unresponsive" state in a Junos Node Slicing setup Product-Group=junos	There are two issues resolved in this PR. Issue 1: In a Junos Node Slicing setup, after assigning MPC7E/8E/9E/11E line card to a guest network function (GNF), a file containing GNF information might be copied to line card with incomplete content during card booting up and it cannot be updated with correct values in subsequent booting as well. It is a rare timing issue (e.g., it may happen if the line cards copy the file from routing engine in Base System (BSYS) while BSYS is populating the file with GNF information.) The issue could cause the MPC7E/8E/9E/11E line card to be stuck in "Unresponsive" state. Issue 2: In a Junos Node Slicing setup with MPC7E/8E/9E/11E line card, after assigning these line cards to a GNF or BSYS or activating/deactivating network-slices, duplicate entries could be added into some files in card (i.e., /etc/hosts.equiv and /root/.rhosts files in card). Over time (maybe years), these files could occupy large disk space and lead to the line card booting up issue.
PR Number	Synopsis	Category: EA chip ( MQSS SW issues )
1444963	Jumbo frames generated by Routing Engine might get dropped on MX10008/MX10016 with MX10K-LC2101 Product-Group=junos	Jumbo frames generated by Routing Engine might get dropped due to incorrect MTU setting on the internal switch in MX10K-LC2101 on MX10008/MX10016.
PR Number	Synopsis	Category: SNMP, mib2d issues
1669510	The snmpd core might be observed with filter-duplicates configuration Product-Group=junos	On all Junos and EVO platforms configured with filter-duplicates, the snmpd core might be observed if the SNMP query is made simultaneously from NMS (Network Management System) as well from the CLI.
PR Number	Synopsis	Category: EVPN Layer-2 Forwarding
1586402	The BUM traffic might lose after triggering NSR in EVPN-MPLS or EVPN-ETREE scenario Product-Group=junos	In EVPN-MPLS or EVPN-ETREE scenario, the EVPN allocates an IM label (Inclusive multicast route labels) per VLAN, and the IM labels including the EVI name and VLAN ID are mirrored to the standby RE (routing engine). If disabling/enabling NSR or switching RE mastership with NSR, the l2ad activated in the new master RE might not create the IM next-hop and locally-learned MAC addresses along with new underlay MPLS next-hop created by rpd for the remote EVPN PE, then the remote EVPN PE might be missed from the flood next-hop group on the EVPN instances, it might cause the BUM traffic to lose between the EVPN PEs.
PR Number	Synopsis	Category: EX driver issues
1600291	The SFP-T port might stop forwarding traffic on EX4600 platforms Product-Group=junos	On EX4600, after performing an upgrade, the peer device is rebooted, the peer interface is disabled/enabled or rebooting EX4600, then the SFP-T port on EX4600 might remain in up state but could not forward traffic.
PR Number	Synopsis	Category: Express PFE Services including JTI, TOE, HostPath, Jflow
1637364	True Outgoing Interface in ECMP traffic is not getting reported correctly by jflow Product-Group=junos	On Junos PTX series, True Outgoing Interface(OIF) reporting might not happen correctly for ECMP traffic when ingress sampling is configured on AE interface.
PR Number	Synopsis	Category: Express PFE L2 fwding Features
1579014	Junos OS: QFX10k Series: Denial of Service (DoS) upon receipt of crafted MLD packets on multi-homing ESI in VXLAN (CVE-2022-22217) Product-Group=junos	An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a Denial of Service (DoS). Please refer to https://kb.juniper.net/JSA69721 [juniper.net] for more information.
PR Number	Synopsis	Category: Flow-tap software
1647179	On MX platforms DTCP radius-flow-tap fails to program PFE Product-Group=junos	On Junos MX platforms, when X-NAS-Port-Id exceeds 48 character length, Dynamic Tasking Control Protocol (DTCP) radius-flow-tap fails to program Packet Forwarding Engine (PFE).
PR Number	Synopsis	Category: PRs for forge platform software issue
1594638	Junos OS: SRX series: The PFE will crash when specific traffic is scanned by Enhanced Web Filtering safe-search (CVE-2022-22206) Product-Group=junos	A Buffer Overflow vulnerability in the PFE of Juniper Networks Junos OS on SRX series allows an unauthenticated network based attacker to cause a Denial of Service (DoS). Refer to https://kb.juniper.net/JSA69710 [juniper.net] for more information.
PR Number	Synopsis	Category: Signature Database
1583420	Junos OS and Junos OS Evolved: Multiple vulnerabilities in SQLite resolved Product-Group=junos	Multiple vulnerabilities in SQLite as used in Juniper Networks Junos OS and Junos OS Evolved have been resolved by upgrading SQLite from 3.31.1 to 3.37.0. Services that rely upon SQLite are the Connectivity Fault Management (CFM) Daemon (CFDM), AppID, IDP, Apache2, J-Web, and JSQL as used by IPID, SecIntel Threat Intelligence, useridd, accounts, processes and services. Refer to https://kb.juniper.net/JSA69705 [juniper.net] for more information.
PR Number	Synopsis	Category: Category for JET(JUNOS Extension Toolkit) related issues
1492631	ALPN extension support disabled for TLS handshake with gRPC client. Product-Group=junos	TLS connection may fail if the gRPC client mandates ALPN extension support.
PR Number	Synopsis	Category: User Firewall related issues
1637548	Unable to connect to domain controller on installing Microsoft KB update Product-Group=junos	On all SRX platforms, when the User Identification feature is used with Active Directory, after the Domain Controller server installs updates related to Microsoft's KB article KB5004442 [juniper.net], SRX is no longer able to connect to it.
PR Number	Synopsis	Category: l2 forwarding on non atlas platforms
1643258	Traffic impact might be seen if persistent-learning is enabled on an interface Product-Group=junos	On all Junos and Junos evolved platforms, clearing the mac from an interface on which persistent-learning is enabled might result in traffic impact. Please restart l2ald process to resolve the issue.
PR Number	Synopsis	Category: prs for lacp protocol
1640240	Aggregated Ethernet interface remains up instead of down after deleting loopback and ae interface ip on neighbor while verifying BFD sessions on router Product-Group=junos	Aggregated Ethernet child interfaces with LACP configurations are not timing out even if peer is gone and not sending any bridge protocol data unit (BPDU).
PR Number	Synopsis	Category: Track Mt Rainier RE platform software issues
1343680	i40e NVM upgrade support for PTX platforms Product-Group=junos	Adding support for i40e NVM upgrade in PTX3000 platforms
1464679	Upgrade might fail on WRL6 based VMHost platform with "grub-editenv: error: invalid environment block" error Product-Group=junos	Junos upgrade might fail on WRL6 based VMHost platform with the error of "grub-editenv: error: invalid environment block".
PR Number	Synopsis	Category: Track veHostd, vmm-sdk issues on Mt Rainier RE
1432432	Flood of messages "vhostd_mq_send_to_junos: Connected to JUNOS server after 1 attempts" in vmhost logs Product-Group=junos	Excessive "vhostd_mq_send_to_junos" message may be printed continuously in the vmhost syslog file on MX routers with RE-S-X6-64G. These messages are non-impact to the system. However, they may contribute to excessive disk activities.
1448413	The vehostd application fails to generate a minor alarm. Product-Group=junos	On Junos OS platforms with NG-RE installed, the process vehostd may crash without the core file and automatic restart of vehostd may fail. Vehostd is a daemon for managing the lifecycle of system-critical Junos OS VMs in the system. If the process vehostd gets in crash state, it will impact the management of Junos OS VMs.
1465547	Internal ixlv1 interface are not up after the PXE/network is installed. Product-Group=junos	On some VMHOST Junos platforms which have upgraded NVM firmware (i40e NVM Firmware), and when trying to upgrade via netboot/PXE boot, the internal ixlv1 interface might not be created due to incompatible NIC driver loaded in routing engine. It might affect RE-RE communication and synchronization.
1468550	The "SDK_VMMD_APPSERVER_OPAQUE_MSG_ERR" message might be seen on VMHost platforms Product-Group=junos	The "SDK_VMMD_APPSERVER_OPAQUE_MSG_ERR" message might be seen on VMHost platforms. On VMHost platform, the current implementation uses the read/write system calls for the TCP socket communication between sdk-vmmd on Junos and vehostd on WRLinux. In some cases, the read/write system calls could result in corruption of data. Because there is no fault handling for these errors, the following error message could be seen. However, the error message is harmless.
PR Number	Synopsis	Category: Kernel-only Base FreeBSD Infrastructure
1639991	Recovery snapshot might fail if OAM volume is already mounted Product-Group=junos	Recovery snapshot might fail with the error "The OAM volume is too small to store a snapshot" if OAM volume is already mounted.
PR Number	Synopsis	Category: Kernel Multicast Infrastructure
1608311	Intermittent p2mp traffic drop might be seen in MVPN scenario Product-Group=junos	On MX platforms that support enhanced IP, intermittent p2mp traffic drop might be seen in the case of MVPN with p2mp. When the multicast composite NH involves unicast NH pointing to pseudo interfaces like interface vt-, irb or lsi and the other unicast next-hop is spread across multiple line cards/PFEs, if a new member joins or an existing member leaves the multicast stream traffic drop might be seen.
PR Number	Synopsis	Category: Kernel MPLS / Tag / P2MP Infrastructure
1654798	RE kernel crash might be observed in the one-hop-LSP MPLS scenario with RE outbound traffic if 'routing-option resolution preserve-nexthop-hierarchy' is configured globally Product-Group=junos	On all Junos platforms, if 'routing-option resolution preserve-nexthop-hierarchy' is configured globally, Routing-engine (RE) kernel crash might be observed in the one-hop-LSP Multiprotocol Label Switching (MPLS) scenario with RE outbound traffic.
PR Number	Synopsis	Category: Kernel Tunnel Interface Infrastructure
1609630	BFD over GRE tunnel interface stuck in "init" state with GRES enabled Product-Group=junos	On all JUNOS platforms, when disabling the physical interface where GRE tunnels is established and performing a GRES (Graceful Routing Engine Switchover). After GRES, enabling the physical interface will cause BFD to become stuck in init state.
PR Number	Synopsis	Category: Express Paradise PFE L3 Features
1649586	Junos OS: PTX Series: FPCs may restart unexpectedly upon receipt of specific MPLS packets with certain multi-unit interface configurations (CVE-2022-22202) Product-Group=junos	An Improper Handling of Exceptional Conditions vulnerability on specific PTX Series devices, including the PTX1000, PTX3000 (NextGen), PTX5000, PTX10002-60C, PTX10008, and PTX10016 Series, in Juniper Networks Junos OS allows an unauthenticated MPLS-based attacker to cause a Denial of Service (DoS) by triggering the dcpfe process to crash and FPC to restart. On affected PTX Series devices, processing specific MPLS packets received on an interface with multiple units configured may cause FPC to restart unexpectedly. Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. Please refer to https://kb.juniper.net/JSA69706 [juniper.net] for more information.
PR Number	Synopsis	Category: Issues related to vMX data plane like RIOT, DPDK, etc
1641119	IPv4 and v6 packet header corruption could happen with some sampling scenario Product-Group=junos	On vMX/MX150/NFX150 platforms, when sampling is enabled on input WAN interfaces and the sampled packet go out through a GRE tunnel, IPv4/6 header corruption may happen. Due to IP header corruption, remote router reports L3 incompletes at receiving interface.
PR Number	Synopsis	Category: Chassis mgmt for all QFX systems - chassis MIB, alarms, CLI
1584902	The the QFX5000 and QFX10000 lines of switches might hang for some time after reboot Product-Group=junosvae	On the QFX5000 and QFX10000 lines of switches, during reboot in certain instances the device might get into a state where the Junos virtual machine hangs until the NMI is triggered and reboots fully. The system recovers after approximately 30 minutes.
PR Number	Synopsis	Category: PFE L2
1638619	Targeted broadcast or WOL feature may not work on QFX 5k platforms Product-Group=junos	On QFX platforms, Wake On LAN(WOL) feature stops working as the affected platforms erroneously process such packets. This might cause a blackhole in the network for such traffic.
1660787	CoS might not get applied on VC ports Product-Group=junosvae	CoS configs are not getting applied on vcp port in QFX5100 VC.
PR Number	Synopsis	Category: All issues related to L3 data-plane/forwarding
1489374	Packets drop might be seen when multicast MAC with static ARP is configured on one IRB interface Product-Group=junos	On EX2300/EX3400/EX4300/EX4600/QFX5K platforms, if multicast MAC with static ARP is configured on one IRB interface, the packets which destination is the IP address of static ARP might not get out of the interface. So traffic drop might be seen.
1631771	Inner VLAN might be stripped off when input-native-vlan-push is disabled Product-Group=junos	On QFX platforms, in Q-in-Q scenario when 'input-native-vlan-push' knob is disabled inner Virtual LAN (VLAN) might be stripped off if it matches the outer VLAN. Traffic drop might be observed in this scenario.
PR Number	Synopsis	Category: QFX VCCP related
1639543	In a VCF scenario on QFX5100, VCP interfaces might flap or not come up at all and CRC errors might increase Product-Group=junos	When VCF (Virtual Chassis Fabric) is set up on QFX5100 platforms, all the VCP (VC port) interfaces on a particular FPC (Flexible PIC Concentrator) might fail to join the VCF and CRC errors on those might increase. A subsequent reboot of the FPC may lead it to a "Not Present" state.
PR Number	Synopsis	Category: QFX5100 Platfom related issues. CPLD, FPGA, FRU, Host, RE
1611354	The ports might remain in downstate on QFX5K platforms Product-Group=junosvae	In a rare scenario, if the upgrade is being performed or ports are continuously flapped on QFX5K platforms, then interfaces might remain in downstate and need to reset in order to restore it.
PR Number	Synopsis	Category: Related to sw defects for K2-RE
1662913	The watchdog timeout is encountered and the system reboots after the 'request system halt' command executed Product-Group=junos	On all platforms with RE-1800 & RE-2000, after the 'request system halt' command is executed, the watchdog timeout is encountered and causes the routing engine (RE) to fail to boot.
PR Number	Synopsis	Category: SW issues specific to Stout (could be in Linux and/or ukern)
1471006	The syslog message of "fpcX user.notice logrotate: ALERT exited abnormally with [1]" might be reported every day Product-Group=junos	The below logrotate ALERT message might be logged every day at 04:02:01.000. 04:02:01.000 : %PFE-x: fpcx user.notice logrotate: ALERT exited abnormally with [1].
1478816	On the MPC7E, MPC8E, and MPC9E line cards, hardware sensor information is logged on the syslog and /var/log/messages every 30 minutes. Product-Group=junos	On MPC7E/8E/9E with MX240/480/960/2000 and MX10003/10008/10016, hardware sensor information is logged on syslog and /var/log/messages every 30 minutes.
PR Number	Synopsis	Category: RPD Next-hop issues including indirect, CNH, and MCNH
1537869	Certain Linux based FPCs might reboot if TNP neighbor towards backup RE continuously flaps on dual-RE platforms Product-Group=junos	On dual-RE platforms, if certain Linux based FPCs (i.e., MPC7E/8E/9E/EX9200-40XS/EX9200-12QS, MPC10E/EX9200-15C, MX10003-LC2103, MX10K-LC2101, MX-SPC3) are installed, when TNP (Trivial Network Protocol) neighbor towards backup RE continuously flaps, FPC might reboot after GRES due to the TNP neighbor issue.
PR Number	Synopsis	Category: security-intelligence feature on SRX
1638923	Kernel panic might be seen during boot Product-Group=junos	On Junos platforms kernel panic might be seen during the boot sequence.
PR Number	Synopsis	Category: MX10003/MX204 Platform SW - Chassisd s/w defects
1393940	The FPC cards might not come up while performing ISSU on MX10003 Product-Group=junos	On MX10003 with 18.2R1 or above, the FPC cards might not come up while performing ISSU.
PR Number	Synopsis	Category: SRX-1RU platfom related protocol, QoS, filtering features et
1541668	SRX4600 PEM code has a bug which might raise false fan failure alarm Product-Group=junosvae	SRX4600 PEM code has a bug which might raise false fan failure alarm when other status is wrong.
PR Number	Synopsis	Category: trinity pfe bridging, learning, stp, oam, irb software
1606731	The FPC might crash if 'flow-table-size' is configured on MX Series routers Product-Group=junos	On MX Series routers, if the statement 'set chassis fpc slot-number inline-services flow-table-size' or 'set chassis fpc slot-number inline-services flex-flow-sizing' is configured, the FPC might crash.
PR Number	Synopsis	Category: Authentication, Authorization, Accounting, PAM (RADIUS/tacpl
1672581	SSHD crash when user successfully authenticates via TACACS Product-Group=junos	SSHD will crash if TACACS user authentication is configured, and the user is successfully authenticated by the TACACS server. The crash occurs with every successful authentication, and an sshd coredump will be created.
PR Number	Synopsis	Category: Issues related to Junos Automation, Commit/Op/Event and SLAX
1604622	File download using "request system download" might fail Product-Group=junos	On a EX4400 device, any files scheduled for download using the cli command "request system download" might fail due to error. The files can be downloaded using normal ftp/scp commands on the device.
PR Number	Synopsis	Category: Issues related to mgd, DAX API, DDL/ODL infrastructure, Juno
1632136	Junos OS: SRX Series and EX Series: Local privilege escalation flaw in "download" functionality (CVE-2022-22221) Product-Group=junos	An Improper Neutralization of Special Elements vulnerability in the download manager of Juniper Networks Junos OS on SRX Series and EX Series allows a locally authenticated attacker with low privileges to take full control over the device. Refer to https://kb.juniper.net/JSA69725 [juniper.net] for more information.
PR Number	Synopsis	Category: SW PRs related to Vale development
1437745	RE switchover does not work as expected while SSD failure occurs Product-Group=junos	On PTX10008/10016 and QFX10008/10016 platforms with GRES enabled, although failover is configured with the knob "on-disk-failure", the switchover is not triggered immediately while SSD failure occurs on master RE.
PR Number	Synopsis	Category: PRs related to vmhost platforms
1339228	Duplicate MAC addresses might be assigned to management interface and internal interface in the Linux host OS on PTX1000 Product-Group=junos	Due to the code change in PR 1292224, duplicate MAC addresses might be assigned to virbr0 interface (used for communication between Linux host OS and JunOS guest OS) and macvtap0/macvtap1 interface (used for management access to the router) in the Linux host OS on PTX1000. MAC address duplication could cause various impairments like routing protocol flapping etc.
1349373	FPCs may reboot continuously until the Routing Engine reboot Product-Group=junos	On a next-generation Routing Engine (NG-RE), a failure of the Hardware Random Number Generator (HWRNG) will leave the system in a state where there is not enough entropy available to operate. Please refer to TSB17734 [juniper.net](http://kb.juniper.net/InfoCenter/index?page=content&id=TSB17734 [juniper.net]) for more details.
1414845	MX204 and EX9251 may fail to shut down or reboot with pciehp errors reported Product-Group=junos	If the Routing Engine BIOS version is 0.15.1, MX204 and EX9251 may fail to shut down or reboot with pciehp errors reported. If this issue happens, manual power cycling is needed to complete a reboot process.
1446090	FPCs throwing "Hard Error" and SPMBs showing offline after upgrade i40e NVM firmware Product-Group=junos	After upgrade i40e NVM firmware, the router may experience FPC "Hard Error", or SPMBs go offline. See TSB17603 [juniper.net] for detail.
1453783	Fabric Hardening and rngd read error may occur after system is idle for some time Product-Group=junos	Passing access authorization of folder /dev/random to guest is causing FPC to enter an unstable state(leading to unexpected issues such as fabric healing, slow response to snmp polling, etc) when host entropy drops below 200, especially when it reaches close to '0'. So removing the authorization of virtio random feature to guest for now until proper fix version is available.
1529710	Multiple FRUs disconnection alarms might be displayed post the firmware upgrade Product-Group=junos	On the MX/PTX platforms with NG-RE installed, after upgrading the Intel i40e-NVM firmware to version 6.01, the FRUs disconnection alarms may be seen along with traffic loss. Please refer to the TSB17603 [juniper.net] (https://kb.juniper.net/TSB17603 [juniper.net]) to upgrade Junos software and Intel i40e-NVM firmware.
1547669	WR Linux 6 platforms and WR Linux 9 platforms might be stuck after upgrading or downgrading image version and restarting the device Product-Group=junos	On Wind River Linux 6 (WR Linux 6) platforms and WR Linux 9 platforms using VMHOST based routing engine (RE), device might be stuck after upgrading image or downgrading image and reload the device. There is service impact if this issue happens.
PR Number	Synopsis	Category: PRs for Xellent Platform issues
1418909	Support for Fortville(i40e) NVM firmware upgrade via CLI for ptx10002-60c (XELLENT) Product-Group=junos	Support for Fortville(i40e) NVM firmware upgrade via CLI for ptx10002-60c (XELLENT) is added in 19.2R2 . In order to upgrade i40e nvm , we need to install optional package jfirmware-vmhost-x86-64 using follwing cli . "request vmhost software add /var/tmp/jfirmware-vmhost-x86-64-19.3I20190510_0920_murv.tgz i40-driver "

19.1R3-S9 - List of Known issues

PR Number	Synopsis	Category: Mojito PFE
1671304	Commit fails on EX4300 as EX4600 and EX4300 mixed virtual-chassis is not able to create more than 1024 IFLs Product-Group=junos	Commit check fails on EX4300 when mixed mode virtual-chassis is configured between EX4600 and EX4300 and IFL (logical interface) is created on an aggregate interface having more than 1024 IFLs. Commit failure will be seen.
PR Number	Synopsis	Category: Mojito Platform
1655530	The dc-pfe might crash due to the VCCP flap Product-Group=junos	On all Junos EX and QFX platforms configured with Virtual Chassis (VC), with the Virtual Chassis Control Protocol (VCCP) flaps or any configuration change which causes VCCP to flap, might lead to the process dc-pfe crash.
PR Number	Synopsis	Category: Mojito Virtual Chassis
1624850	Delay might be observed while establishing the virtual-chassis post upgrading or rebooting device Product-Group=junos	On all EX4300 platforms except EX4300-48MP with virtual chassis ports using the DAC cables, there might be a delay in establishing the virtual-chassis post upgrading or rebooting the device.
PR Number	Synopsis	Category: GNATS category to track PRs in Rodnik Platform area
1569230	The 40G DAC connection between EX9253 and the peers might not come up Product-Group=junos	DAC cable might not come up in 40G mode between EX9253 when any interface on PIC0 of FPC 0 or FPC 1 is connected to the peers.
PR Number	Synopsis	Category: Category for all the Sazerac & Macallan PFE PRs
1633883	The EX2300 may unexpectedly drop VOIP VLAN traffic after reboot Product-Group=junos	On the EX2300 platform, the traffic drop may be observed on VOIP VLAN after the device reboot. Voice VLAN on EX2300 may not forward traffic correctly out of the interface when the device is either power-cycled / halted / power off or power on, and may not communicate with the default gateway.
PR Number	Synopsis	Category: Category for all the Sazerac & Macallan platform related PRs
1539933	The POE might fail on EX platforms due to a rare timing issue in the VC scenario Product-Group=junos	On EX platforms with Virtual Chassis (VC) scenario, Power over Ethernet (POE) might not be detected and hence might fail to work on VC members. This happens when there is a CPU spike on master (for example 70% or above) and if a VC member gets rebooted or a new member joins VC. It is a rare timing issue and hard to reproduce.
PR Number	Synopsis	Category: NFX Series Platform Software
1649302	show system visibility cpu shows vjunos0 100% Product-Group=junos	Show system visibility cpu show physical CPU 0, 1, and 2 at 100% utilization
1672440	On NFX250-S1E, After request system zeroize secondary, Secondary SSD Boots to Windriver, and does not launch JDM or JCP Product-Group=junos	On NFX250-S1E, After request system zeroize secondary, Secondary SSD Boots to Windriver, and does not launch JDM or JCP
PR Number	Synopsis	Category: BBE dynamic profile related issues
1598726	Subscriber may not be able to come up on an AE interface Product-Group=junos	On the MX series platforms with "subscriber-management" enabled, if targeted distribution is enabled on an AE interface, subscriber may not be able to come up if restarting FPC where AE member interfaces are located or deactivating/activating AE member interfaces while GRES or bbe-smgd restarting is still in process.
PR Number	Synopsis	Category: BBE interface related issues
1624772	The AE member link might not be correctly populated on the PFE after FPC restart on MX series platforms Product-Group=junos	After FPC restart, the Aggregated Ethernet (AE) member link might not be populated on the PFE when using AE interfaces in dynamic profiles having targeted-distribution enabled on MX series platforms in subscriber environment.
1633392	The bbe-smgd process might crash after removing and adding a child link from AE interface Product-Group=junos	On MX platforms enabled with dynamic-profiles for subscribers and the subscribers are configured over AE [Aggregate Ethernet] interface with targeted-distribution. When the child links of the AE interface are removed and then added, it could lead to bbe-smgd crash in the backup RE. This in-turn could affect the control plane subscriber services when the primary RE fails during such event.
PR Number	Synopsis	Category: Border Gateway Protocol
1351639	The rpd crashes in Junos OS Release 16.1 or later during BGP convergence Product-Group=junos	In Junos 16.1 or higher, during BGP convergence, the input/output thread constructing the outgoing BGP PDU and manipulating the path attributes before hand-off the data to the socket. If this PDU length is zero, it will trigger an assertion and routing-protocol demon is restarting.
PR Number	Synopsis	Category: functionality related to Broadband Remote Access Server
1402653	The subscriber might need to take retry for login Product-Group=junos	On all Junos platforms running in subscriber scenario with address pool configured, if the address pool has high usage so that only few addresses are free to allocate, when there are subscribers logout and login, the released address by one subscriber might get re-used and allocated to the other subscriber very soon. Due to this issue, syslog error messages might be seen, and the affected subscriber might need to take retry for login.
PR Number	Synopsis	Category: Tracking PD specific issues on BRCM platforms running EVO
1545455	The chip on FPC line card might crash when the system reboots. Product-Group=junos	On the FPCs with Broadcom chip, if the jinsightD (health-mon) is not disabled ("set system processes health-mon disable"), the FPC might crash during the system booting. Traffic loss is seen during the FPC crash and restart.
PR Number	Synopsis	Category: OpenSSL and related subsystems
1618986	Junos OS: OpenSSL security fixes Product-Group=junos	Juniper Networks has upgraded the OpenSSL library included in Juniper Networks Junos OS to fix specific vulnerabilities. Please refer to https://kb.juniper.net/JSA69715 [juniper.net] for more information.
PR Number	Synopsis	Category: Firewall Filter
1421621	With IPSec configuration, following GRES, Standby RE is not accessible via SSH until a 2nd GRES is performed Product-Group=junos	With IPSec configuration, after GRES, trying to ssh to the "new" standby RE may fail until the IPSec Key management daemon no longer running.
PR Number	Synopsis	Category: Express PFE including evpn, vxlan related issues on QFX10K
1674116	The BFD packets will drop in an EVPN-VxLAN scenario due to incorrect layer3 offset being set in the host path Product-Group=junos	On all QFX10000-60C platforms with Ethernet VPN-Virtual Extensible LAN (EVPN-VxLAN) scenario, the Bidirectional Forwarding Detection (BFD) packets are getting classified as packets of different protocols like Virtual Router Redundancy Protocol (VRRP), depending on the value at an incorrect offset which leads to BFD packet drop.
PR Number	Synopsis	Category: Express PFE L2 fwding Features
1648078	The CLNP traffic tunneled through EVPN-VXLAN fabric might get dropped Product-Group=junos	On QFX10k platforms with EVPN-VXLAN (Ethernet Virtual Private Network Virtual Extensible LAN) is deployed, differences in the unicast and multicast packets between IS-IS (Intermediate System - Intermediate System) hello packets and CLNP (Connectionless Network Protocol) ping packets might be observed. The packet might get egressed out, but the LLC (Logical Link Control) header data is missed. A header needs to be added for all LLC packets, so the peer node can not recognize these packets without the header, and it simply discards the CLNP packet.
PR Number	Synopsis	Category: l2 flow module
1599891	OSPF neighbor won't establish under Transparent mode when neighborship across different zone Product-Group=junos	Some of the OSPF neighborship might not able to establish after system bootup when the neigborship connect to SRX via different zone under transparent mode
PR Number	Synopsis	Category: MX Timing software
1631274	PTP (Precision Time Protocol) might not lock on MX with MX-MPC2E-3D-P and MPC2E-3D LC Product-Group=junos	On all MX platforms with MX-MPC2E-3D-P and MPC2E-3D LC linecards, traffic might be flapping between ACQUIRING and HOLDOVER states while PTP with telemetry NPU is enabled.
PR Number	Synopsis	Category: SW PRs related to Vale Edge (MX10K) development
1569167	The agent sensor __default_fabric_sensor__ are partly applied to some FPCs, which causes zero payload issue AGENTD received empty payload for pfe sensor __default_fabric_sensor__. Product-Group=junos	PR 1507864 had fixed the invalid data exported from PFE (empty payload), which could be ignored. However, the system logs this event as an error. The fix changed the event as an info.
PR Number	Synopsis	Category: Microkernel for neo mpc
1664602	Line card may crash after offline/online plane Product-Group=junos	On platforms supporting MQ and XM-based line cards, destination error, self-ping error and line cards can be offline after swapping the XM-based uplink cards and toggling the fabric planes. The issue will be seen on other MQ-based line cards in the chassis.
PR Number	Synopsis	Category: This PR category is for tracking only IPv4/ARP/ICMPv4 is
1644616	GARP reply doesn't update ARP entry though gratuitous-arp-reply option is configured. Product-Group=junos	Receiving GARP reply doesn't help update ARP entry though gratuitous-arp-reply option is configured. As a result, traffic loss might be seen depending on the timing.
PR Number	Synopsis	Category: Kernel Multicast Infrastructure
1555274	Multicast traffic in MVPN setup might be blackholed on some PTX platforms acting as transit LSR Product-Group=junos	On PTX3000/PTX5000/PTX10008/PTX10016 platforms in MVPN setup with aggregated Ethernet(AE) having 2 interfaces on 2 different PFE's, if protocol status of one AE member interface goes down (mBFD Down or disabling lacp on the peer), but physical state remains Up, multicast traffic might be blackholed.
PR Number	Synopsis	Category: PRs requiring triage and/or fix in the PFE Peer Infra
1667674	The FPC might fail to initialize on Junos platforms Product-Group=junos	On all Junos platforms, in a very corner case, the FPC (Flexible PIC Concentrators) might fail to initialize and remains in a stuck state when an FPC is installed or rebooted.
PR Number	Synopsis	Category: OSPF routing protocol
1659366	The memory leak and process rpd crash might be observed when the peer interface flaps continuously in the Segment Routing Product-Group=junos	On all Junos and Junos OS Evolved platforms configured with Segment Routing, when the peer interface flaps continuously, the memory leak might be observed which might lead to the process rpd crash.
PR Number	Synopsis	Category: Issues related to vMX data plane like RIOT, DPDK, etc
1669261	VMX crash as result of riot out of memory condition, reporting Interrupted thread 30 TTP Transmit. Product-Group=junos	VMX crash as result of riot out of memory condition, reporting Interrupted thread 30 TTP Transmit. The memory leak can be observed when checking RSI for pool-0 values. request support information \| match pool-0 - Pool-0 Values below 2000 are suspect memory problem.
PR Number	Synopsis	Category: QFX ISSUE PFE related
1576060	On the QFX5100-48T switch, the 10G interface might be auto-negotiated at 1G speed instead of 10G Product-Group=junos	On the QFX5100-48T switch, auto-negotiation might fail to work and the 10G interface might be auto-negotiated at 1G speed instead of 10G. This issue might cause a link down.
PR Number	Synopsis	Category: PFE L2
1560086	On the QFX5200 line of switches, the pseudorandom binary sequence (PRBS) test fails for 100GbE interfaces with the default settings. Product-Group=junos	On the QFX5200 line of switches, the pseudorandom binary sequence (PRBS) test fails for 100GbE interfaces with the default settings.
1649637	The local-minimum-links feature not working as expected on QFX5100 VC platforms Product-Group=junos	On the QFX5100 VC(Virtual-Chassis) platform, the AE(Aggregated Ethernet) interface might not go down on a single interface flap in the bundle even though the knob "local-minimum-links" is configured on the device.
PR Number	Synopsis	Category: QFX5200/5110/5120/5210 Platfom issues
1670917	QFX5110VC / PEM and Fan tray shows absent on backup FPC Product-Group=junos	On QFX5110 VC, backup or linecard member in VC may show absent status for the PEM and FAN tray This happens when the lcmd daemon of the backup/linecard member stops updating FRU status to chassisd of master switch.
PR Number	Synopsis	Category: This would be category for IPSEC functionality on M/MX/T ser
1674585	The 'kmd' process may crash due to SA re-negotiation failure during IKE phase-1 Product-Group=junos	On platforms running Junos 16.2 onwards releases, if for some reason IKE (Internet Key Exchange) phase-1 SA (Security Association) re-keying fails, 'kmd' process may crash and the IPSec (Internet Protocol Security) tunnels may also get torn down. Most of the time, the reason is that the initiator changes its offerings after the initial successful key exchange.
PR Number	Synopsis	Category: SSL Proxy functionality on JUNOS
1501624	Memory corruption might happen if SSL proxy is enabled on SRX platforms Product-Group=junos	On all SRX platforms, if Secure Sockets Layer (SSL) proxy is enabled, when the device is running low on memory, there might be invalid free for certificate cache which will result in memory corruption and random cores.
PR Number	Synopsis	Category: Stout cards (MPC8, MPC9) fabric issues
1617469	MPC8E in 1.6T bandwidth mode may not work correctly Product-Group=junos	On MX2010/2020/2008 platform if MPC8E is set in 1.6T bandwidth mode, it may not work correctly and the end result is that the MPC8E will not be able to see 1.6T throughput (as configured) and will see fabric drops at higher traffic rates. The 1.6T bandwidth fabric parameters are not getting applied to SFBs. https://kb.juniper.net/TSB18180 [juniper.net]
PR Number	Synopsis	Category: trinity pfe bridging, learning, stp, oam, irb software
1631217	The core interface goes down Product-Group=junos	Using static LSP(labeled switched path) configuration, the child node is not removed from the flood composite when the core interface goes down.
PR Number	Synopsis	Category: Vale fabric related issues.
1615942	90% traffic got dropped when the number of Switch Interface Board (SIB) plane is reduced from 4 to 3 on PTX10008 and PTX10016 Product-Group=junos	On PTX10008 and PTX10016 routers, when the number of Switch Interface Board (SIB) planes is reduced from 4 to 3, traffic might drop by 90%.

Modification History

First publication 2022-08-30