Alert Type
PSN - Product Support Notification
Risk
Risk Description
Low/Notification
Software Release Notification
Impact
Impact Description
Low/Notification
Software Release Notification
Product Affected
ACX, EX, NFX, MX, PTX, QFX, SRX, vSRX
Alert Description
Junos Software Service Release version 20.3R3-S5 is now available for download from the Junos software download site
Download Junos Software Service Release:
Go to
Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select
Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as need and follow the prompts
Solution
Junos Software service Release version 20.3R3-S5 is now available.
20.3R3-S5 - List of Fixed issues
PR Number
Synopsis
Category: Mojito PFE
1590037
HEAP malloc(0) is seen with base configurations
Product-Group=junos
On EX4300 Series platforms, if the ukern malloc function is invoked with size 0, the malloc call might have the potential for heap memory corruption in the caller code.
1653216
IRACL filters more than 64 might not work on IRB units
Product-Group=junos
On EX4300 series platform, limitation in IRACL (Ingress Routed Access Class list) filters applied to IRB units till 64, and filter applied beyond 64 will not work.
1671304
Commit fails on EX4300 as EX4600 and EX4300 mixed virtual-chassis is not able to create more than 1024 IFLs
Product-Group=junos
Commit check fails on EX4300 when mixed mode virtual-chassis is configured between EX4600 and EX4300 and IFL (logical interface) is created on an aggregate interface having more than 1024 IFLs. Commit failure will be seen.
PR Number
Synopsis
Category: Mojito Platform
1655530
The dc-pfe might crash due to the VCCP flap
Product-Group=junos
On all Junos EX and QFX platforms configured with Virtual Chassis (VC), with the Virtual Chassis Control Protocol (VCCP) flaps or any configuration change which causes VCCP to flap, might lead to the process dc-pfe crash.
PR Number
Synopsis
Category: Category for all the Sazerac & Macallan PFE PRs
1633883
The EX2300 may unexpectedly drop VOIP VLAN traffic after reboot
Product-Group=junos
On the EX2300 platform, the traffic drop may be observed on VOIP VLAN after the device reboot. Voice VLAN on EX2300 may not forward traffic correctly out of the interface when the device is either power-cycled / halted / power off or power on, and may not communicate with the default gateway.
1653260
L2PT may not work for AE interfaces in Q-in-Q environment.
Product-Group=junos
This issue Affects all EX-2300,EX-3400,EX-4300MP,EX4600,EX4600-40F. L2PT may not work for AE interfaces in Q-in-Q environment.
PR Number
Synopsis
Category: VC Infrastructure
1650967
Virtual chassis instability when members are rebooted
Product-Group=junos
On EX4600, virtual chassis (VC) might unstable when members are rebooted.
PR Number
Synopsis
Category: All issues related to QFX PFE CoS
1650051
The fixed classifier may not work in MPLS and VXLAN scenario
Product-Group=junos
On QFX5100 platforms, traffic may not get classified based on a fixed classifier in MPLS as well as the VXLAN scenario.
PR Number
Synopsis
Category: All the issues related to PFE MPLS
1627002
Traffic towards MPLS-Core is not rerouted to alternate port on QFX5k platforms
Product-Group=junos
On QFX5k platforms after active egress port is down, traffic is not rerouted to alternate port towards Multiprotocol Label Switching (MPLS)-Core.
1665778
Transit MPLS traffic can get dropped on the QFX5120 P router.
Product-Group=junosvae
FLAP of RSVP link protection LSP creates the stale entries in the QFX5120 PFE LABEL swap table. This PFE table size is 16k and once it will hit the limit genuine MPLS Label will fail to program and traffic hitting the failed ingress label will get black holed.
PR Number
Synopsis
Category: This is for Hw & Sw issues which are special for SPC3 car
1641793
Traffic might be dropped due to the RX queue being full
Product-Group=junos
Incoming packets might be sent to RX queues of core0 or core14 mistakenly, might result in the queue buffer full and the packets getting dropped.
PR Number
Synopsis
Category: BBE Layer-2 Bitstream Access
1652337
The L2BSA subscribers may not be able to browse due to incorrect entries in the VPLS mac-table
Product-Group=junos
On All Junos platforms, a few L2BSA(Layer 2 Bit Stream Access) subscribers with specific S-VLAN (stacked VLAN) allocated from a specified VLAN range may face issues with traffic forwarding due to incorrect/duplicate entries which might block the genuine subscribers. When this happens, subscriber traffic could be dropped.
PR Number
Synopsis
Category: Border Gateway Protocol
1655228
An RPD process crash may be observed, when the received prefix count exceeds configured "prefix-limit"
Product-Group=junos
In all Junos and Junos Evolved platforms, when the BGP neighbor is brought down due to the received prefix count exceeding configured "prefix-limit" and if BGP disable and enable operation performed to bring the BGP session up then the "rpd" process crash might be observed.
1664168
The v4 prefixes might not be advertised over the BGPv6 sessions
Product-Group=junos
On all MX platforms with BGP rib-sharding and update-threading configured, the v4 prefixes might not be advertised over the BGPv6 sessions.
1669930
BGP inactive routes may not be advertised to peers in BGP-LU scenario
Product-Group=junos
If BGP-LU(labeled-unicast) is configured using "rib inet.3/inet6.3" address family, BGP inactive routes are not re-distributed to BGP-LU peers, leading to improper traffic patterns.
PR Number
Synopsis
Category: Firewall Filter
1662955
The MPC/FPC crash is seen on specific LC's running BGP Flowspec
Product-Group=junos
On Junos platforms with specific MPC/FPC model, crash may happen in certain scenario with BGP flowspec. With the BGP flowspec filter, the scaled prefix-list spread across the terms with a total prefix-list-scale. While processing the BGP flowspec filter with scale, it takes almost 6 minutes to consume the filter into ASIC during convergence. Since the PFE has a time max limit which is lesser than 6 scaled convergence time, PFE crash happens during the threshold handler. This causes the services or traffic impact running through the FPC until the FPC comes online and configurations are converged again.
PR Number
Synopsis
Category: OAM support on DNX
1560182
When an RDI is received with CCM packet, sessions are not deleted
Product-Group=junos
RDI received in CCM messages are not handled and hence the CFM sessions will not go down on receiving RDI indication from peer. With this fix, RDI indication from peer will be handled.
PR Number
Synopsis
Category: VxLAN specific
1665828
MAC-IP bindings for IPv4 (ARP) and IPv6 (ND) may not be processed for IRB interfaces in an EVPN scenario
Product-Group=junos
On all Junos and Junos Evolved platforms, when EVPN (Ethernet Virtual Private Network) related configuration is introduced from baseline, due to a rare timing issue between the IRB (Integrated Routing and Bridging) interfaces coming up and an attempt is made by the 'l2ald' (l2 address learning) daemon to process the corresponding MAC-IP entries, this issue may occur. This may also occur when IRB logical units are activated and deactivated.
PR Number
Synopsis
Category: Covers Application classification workflows apart from custo
1638588
AppID installation failure on the secondary HA node in case of failover
Product-Group=junos
On SRX platforms, installation of Application Identification service failed on the secondary HA node in case of failover due to checksum validation.
1642383
Flowd crash when back to back sigpack is updated at the time of stress traffic
Product-Group=junos
The flowd might crash when back to back sigpack is updated when heavy traffic is going on.
PR Number
Synopsis
Category: Manageability SW defect for Dvaita NPI (Node Virtualization)
1583324
JDM server creation might fail on junos node slicing setup in in-chassis mode
Product-Group=junos
On MX platforms the JDM (Juniper Device Manager) server could not be created in in-chassis mode of junos node slicing, which results in mgd process crash and affects GNF's (Guest Network Function) provisioning.
PR Number
Synopsis
Category: SNMP, mib2d issues
1669510
The snmpd core might be observed with filter-duplicates configuration
Product-Group=junos
On all Junos and EVO platforms configured with filter-duplicates, the snmpd core might be observed if the SNMP query is made simultaneously from NMS (Network Management System) as well from the CLI.
PR Number
Synopsis
Category: EVPN control plane issues
1659786
The process rpd might crash when protocol EVPN is deactivated
Product-Group=junos
On all Junos and Junos OS Evolved platforms, with multiple activating/deactivating Ethernet Virtual Private Network (EVPN) or deactivating the Virtual Routing and Forwarding (VRF) instance with protocols EVPN for type 5 route, the process rpd might crash.
PR Number
Synopsis
Category: EVPN Layer-2 Forwarding
1611699
Modifying (add/del/change) the attributes (for eg, vlan id, encapsulation, protocols, mac/mac-ip limit etc) of routing-instance or default-switch will cause re-incarnation of routing instance/switch
Product-Group=junos
Any change in attribute of routing instance or default-switch may cause route deletion and addition due to deletion and addition of routing-instance or default-switch
1669811
BUM traffic might be blackholed for ESI configured CE interface flap
Product-Group=junos
On Junos MX/QFX5K/QFX10K platforms and Junos Evolved ACX/MX platforms, on interface up/down event loop prevention might not work resulting in BUM traffic being blackholed.
PR Number
Synopsis
Category: Express pfe Mclag
1666399
Static MACs are not programmed after reboot, resulting in floods of unicast traffic
Product-Group=junos
After rebooting, we see that the link does not have a static MAC address. This results in unicast traffic flooding and sometimes traffic drops for this static MAC.
PR Number
Synopsis
Category: Inline Jflow PRs for defect & enhancement requests
1652901
The syslog errors and PPE traps might be observed
Product-Group=junos
On MS-MPC/MPC-3D/MPC1/MPC1E/EX9200-40T/EX9200-40F/SRX5K-SPC-4-15-320/SRX5K-MPC/SRX5K-MPC3-100G10G/SRX5K-MPC3-40G10 linecards, syslog errors and PPE(Packet Forwarding Engine) traps might be observed due to exhaustion of NH partition of memory.
PR Number
Synopsis
Category: ISIS routing protocol
1664152
The rpd crash might be seen on MX platforms
Product-Group=junos
On Junos platforms supporting SRv6 (Segment Routing), the rpd (routing processor daemon) crash may be observed when there is an update in the LSP (Link State PDU) for IS-IS (Intermediate System-Intermediate System). There might be a service impact because of the rpd crash, however, the system will self-recover to a functional state before the next occurrence.
PR Number
Synopsis
Category: jdhcpd daemon
1651768
DHCP packets might not be sent to the clients when 'forward-only' is reconfigured under the routing instance
Product-Group=junos
On EX9200, and EX4300 platforms, when 'forward-only' is reconfigured under the routing instance, after deleting the configuration, Dynamic Host Configuration Protocol (DHCP) packets might not be sent to the clients.
PR Number
Synopsis
Category: jl2tpd daemon
1667861
L2TP session might not come up when L2TP access-line-information is not configured
Product-Group=junos
When MX platform running JUNOS enhanced subscriber management feature as LNS (L2TP network server) receives DSL/PON attributes from LAC (L2TP access concentrator) and "services L2TP access-line-information" switch is not configured, the l2TP session might be disconnected.
PR Number
Synopsis
Category: Flow Module
1668898
vSRX not processing fragmented packets
Product-Group=junos
When the system memory is running low (Yellow/Orange zone) due to extensive L7 inspection of traffic, fragmented packets may not be able to be reassembled and may be dropped.
PR Number
Synopsis
Category: Issues related to Firewall Authentication on SRX platforms
1651129
22.1R1:AUTH:unable to get the "firewall-authentication users" details on node 1
Product-Group=junos
Functionality Impact - Authentication entries will not be synced to secondary node in the HA setup and when switchover happens, already established authentication sessions will be lost and clients will have to login again with authentication credentials.
1673125
Information about users groups is not displayed completely
Product-Group=junos
On SRX platforms using authentication-scheme (pass-through/web-auth/web-redir) and authentication sources (firewall-user/ldap/radius) do not display the complete user's group information because the display buffer for showing group names for an authentication entry is too small.
PR Number
Synopsis
Category: Firewall Network Address Translation
1645039
Datapath daemon might crash resulting in total traffic and service failure
Product-Group=junos
On all SRX-Series devices, when policy configuration is modified and committed multiple times while the device is handling MS-RPC traffic with more than 1000 RPC port map entries present in the device, it may result in datapath daemon crash.
1651939
The NAT ports exhaust when address-pooling pair is configured in SRX devices
Product-Group=junos
On all SRX devices, high NAT (Network Address Translation) pool usage is observed when only APP (address-pooling pair) configuration is in place. The device experiences exhaustion of NAT resources and over the time cause NAT allocation failure and the leak of NAT ports.
PR Number
Synopsis
Category: Firewall Policy
1653413
Unified policy url-category does not work when "application-system-cache security-services" is enabled.
Product-Group=junos
On SRX series platform, unified policy url-category does not work when "application-system-cache security-services" is enabled. This will allow the URL which should be blocked.
PR Number
Synopsis
Category: l2 forwarding on non atlas platforms
1664955
MAC addresses learned on the RTG interface are not aging out
Product-Group=junos
On Junos EX/NFX/QFX platforms, stale MAC addresses entry not getting removed for RTG (Redundant trunk groups) interfaces.
PR Number
Synopsis
Category: prs for lacp protocol
1635935
Traffic loss may be seen on QFX10K due to congestion
Product-Group=junos
During congestion PPMAN(Periodic packet management) run short of resource leading to PDUs (Protocol Data Units) getting failed to be sent. Due to PPMAN queue starvation across TX/RX path, LACP sessions may not get a chance to transmit PDUs which can further lead to peer lacp timeout, aggregated ethernet interface flap and traffic loss.
1640240
Aggregated Ethernet interface remains up instead of down after deleting loopback and ae interface ip on neighbor while verifying BFD sessions on router
Product-Group=junos
Aggregated Ethernet child interfaces with LACP configurations are not timing out even if peer is gone and not sending any bridge protocol data unit (BPDU).
PR Number
Synopsis
Category: Issues related to Junos licensing infrastructure
1658869
The license might get out of sync between master and backup RE
Product-Group=junos
On all Junos OS Evolved platforms, the license might get out of sync between master and backup RE after the addition/deletion of licenses.
PR Number
Synopsis
Category: lldp sw on MX platform
1669677
LLDP neighborship might fail if the chassis-id format of the LLDP packet is xx:xx:xx:XX:XX:xx'
Product-Group=junos
On all Junos platforms, Link Layer Discovery Protocol (LLDP) neighborship fails if the chassis-id format of the LLDP packet is xx:xx:xx:XX:XX:xx'
PR Number
Synopsis
Category: MX104 Software - Chassis Daemon
1668983
FEB may go down while activating/deactivating GRES configuration
Product-Group=junos
On MX platforms with MIC-MACSEC-20GE, FEB(Forwarding Engine Board) may go down while activating/deactivating GRES(G?raceful Routing Engine Switchover) configuration.
PR Number
Synopsis
Category: This PR category is for tracking only IPv4/ARP/ICMPv4 is
1644616
GARP reply doesn't update ARP entry though gratuitous-arp-reply option is configured.
Product-Group=junos
Receiving GARP reply doesn't help update ARP entry though gratuitous-arp-reply option is configured. As a result, traffic loss might be seen depending on the timing.
PR Number
Synopsis
Category: Category for ifstate infrastructure issues
1572305
The fxpc process might crash and cause traffic loss in the IFBD scenario
Product-Group=junos
On all Junos platforms, traffic loss might be observed due to a rare timing issue when performing frequent IFBD (Interface Bridge Domain) configuration modifications. This behavior is seen when the PFE (Packet Forwarding Engine) receives out-of-order IFBD(s) from RE (Routing Engine) and might lead to the fxpc process crash and traffic drop.
1642172
Junos OS: RIB and PFEs can get out of sync due to a memory leak caused by interface flaps or route churn (CVE-2022-22209)
Product-Group=junos
A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated network based attacker to cause a Denial of Service (DoS).Please refer to https://kb.juniper.net/
JSA69713
[juniper.net]
for more information.
PR Number
Synopsis
Category: Kernel Multicast Infrastructure
1555274
Multicast traffic in MVPN setup might be blackholed on some PTX platforms acting as transit LSR
Product-Group=junos
On PTX3000/PTX5000/PTX10008/PTX10016 platforms in MVPN setup with aggregated Ethernet(AE) having 2 interfaces on 2 different PFE's, if protocol status of one AE member interface goes down (mBFD Down or disabling lacp on the peer), but physical state remains Up, multicast traffic might be blackholed.
PR Number
Synopsis
Category: Kernel MPLS / Tag / P2MP Infrastructure
1654798
RE kernel crash might be observed in the one-hop-LSP MPLS scenario with RE outbound traffic if 'routing-option resolution preserve-nexthop-hierarchy' is configured globally
Product-Group=junos
On all Junos platforms, if 'routing-option resolution preserve-nexthop-hierarchy' is configured globally, Routing-engine (RE) kernel crash might be observed in the one-hop-LSP Multiprotocol Label Switching (MPLS) scenario with RE outbound traffic.
PR Number
Synopsis
Category: OSPF routing protocol
1659366
The memory leak and process rpd crash might be observed when the peer interface flaps continuously in the Segment Routing
Product-Group=junos
On all Junos and Junos OS Evolved platforms configured with Segment Routing, when the peer interface flaps continuously, the memory leak might be observed which might lead to the process rpd crash.
PR Number
Synopsis
Category: Express Paradise PFE L3 Features
1629200
The vmhost crash might be seen in a rare condition when route addition and change
Product-Group=junos
On some QFX/PTX platforms, when route addition and change, in a rare condition, an invalid hash index value might be calculated and cause vmhost crash.
1663881
ALB stats not showing in CLI
Product-Group=junos
Adaptive [Load Balancing] Statistics are not updated under 'show interfaces aeX extensive' on the QFX10k platform.
PR Number
Synopsis
Category: vMX Platform Infrastructure related issue tracking
1634908
LACP interface might go down when a sub-interface configuration is added and committed to the AE interface
Product-Group=junos
On all MX150 platforms, when an Aggregate Ethernet (AE) interface is configured with LACP and adding a sub-interface configuration under the AE interface causes the LACP down leads to traffic loss.
PR Number
Synopsis
Category: Chassis mgmt for all QFX systems - chassis MIB, alarms, CLI
1603588
Chassisd generates "Cannot read hw.chassis.startup_time value: m" every 5 seconds on QFX10008
Product-Group=junos
On QFX platforms, the "Cannot read hw.chassis.startup_time value:m" error log is generated every 5 seconds in the output by "show log chassisd". This is a cosmetic message. There is no impact to the system.
PR Number
Synopsis
Category: Category to track the issues related to QFX5K hostpath
1630201
LACP timeout might be observed during high CPU utilization
Product-Group=junos
On QFX5100 switches, when the CPU utilization (Routing Engine and FPC) is 85 percentage or more and there are multiple Network Configuration Protocol (NETCONF) sessions running or SNMP polling is happening over multiple sessions simultaneously, the LACP session configured in fast mode might timeout.
PR Number
Synopsis
Category: for all ipv6 related issues
1662707
IPv6 ND packets might be dropped in QFX5100 and QFX5110 platforms
Product-Group=junos
On QFX5100 and QFX5110 platforms, with L2circuit configured, after performing an upgrade, the IPv6 ND (Neighbor Discovery) packets might be dropped.
PR Number
Synopsis
Category: PFE L2
1626011
The third 802.1Q tag might not be pushed onto the stack in the Q-in-Q tunneling
Product-Group=junos
In the Q-in-Q tunneling scenario, when dual VLAN tagged multicast packets (e.g., OSPF protocol packets) are received into a C-VLAN interface with an 'input-VLAN-map push' configuration, the VLAN swap operation will be done instead of the push operation. This issue could cause the packets to egress the S-VLAN interface with two VLAN tags instead of three VLAN tags
1649637
The local-minimum-links feature not working as expected on QFX5100 VC platforms
Product-Group=junos
On the QFX5100 VC(Virtual-Chassis) platform, the AE(Aggregated Ethernet) interface might not go down on a single interface flap in the bundle even though the knob "local-minimum-links" is configured on the device.
1650416
L2PT configuration on a transit switch in a Q-in-Q environment breaks L2PT
Product-Group=junos
L2PT on a transit switchs like Ex4600 and QFX in a Q-in-Q environment breaks L2PT for other S-VLANs if uplink is AE (Aggregated Ethernet) interface.
1652976
The inner tag (C-tag) value might get modified to zero for egress traffic when the inner tag values are copied to the outer tag (S-tag)
Product-Group=junos
On all QFX5120 and EX4650 Junos platforms, when priority bits (P-bits) in C-tag are copied to S-tag in the switch, and then the C-tag is reset to 0.
1660787
CoS might not get applied on VC ports
Product-Group=junosvae
CoS configs are not getting applied on vcp port in QFX5100 VC.
PR Number
Synopsis
Category: All the issues related to PFE MPLS
1666760
BGP-LU traffic might be dropped when "CCNH ingress labeled-bgp inet" is configured
Product-Group=junos
On Junos PTX platforms, the native inet packet might not be forwarded correctly when "Chained Composite Next-Hop (CCNH) ingress labeled-bgp inet" is configured. PFE wrongly adds Label 3 to the incoming inet packet and sent the MPLS frame to the edge device where it fails.
PR Number
Synopsis
Category: PRs for PFE EVPN / VxLAN related issues on QFX5K
1645929
An interface might be detached from LACP when configuring VLAN tagging in the EVPN-VXLAN scenario on Junos QFX5K platforms
Product-Group=junos
On Junos QFX5K platforms, the LACP packet might get intercepted and the interface detached from LACP when configuring VLAN tagging in the EVPN-VXLAN scenario.
1665306
On QFX5K series platforms, duplicate packets might be seen in the multihomed scenario in an EVPN-VxLAN fabric when unicast ARP packets are received
Product-Group=junos
On QFX5K series platforms, when unicast ARP (Address Resolution Protocol) is received for a MAC address that is already learned in an EVPN-VxLAN (Ethernet VPN-Virtual Extensible LAN) environment, the ARP request is flooded and duplicate packets might be seen on leaf devices. We might see some service impact where split-horizon might not work or continuous mac-move might be seen. This issue is rare and very unlikely to occur in a production environment due to presence of intermediate switches which might resolve the unicast ARP query.
PR Number
Synopsis
Category: QFX VCCP related
1646561
VCP neighborship might not be formed on the LX4 40G VCP port
Product-Group=junos
On all QFX5100 Virtual Chassis platforms, after the reboot, Virtual Chassis port (VCP) ports may not establish a VCP connection and Cyclic Redundancy Check (CRC) errors are also observed.
PR Number
Synopsis
Category: QFX10008/16 QFX10002 Ultimat/Elit platform related issues -
1670240
The dcpfe process might generate core-dumps and FPC might crash after line card reboot or switchover
Product-Group=junos
On QFX10K, PTX10K, PTX5K, PTX3K, and PTX1K platforms, the dcpfe process might generate core-dumps and FPC might crash after line card boot or switchover. The BIST (Built-in Self Test) might report an error in the HMC (Hybrid Memory Cube) and restart the dcpfe process causing FPC crash.
PR Number
Synopsis
Category: QFX5100 Interface related issues
1669436
On specific QFX5k platforms, member links may reduce their configured speed when the other side doesn't have auto-negotiation disabled
Product-Group=junos
On QFX5110, QFX5120, QFX5200-32C and QFX5100 Junos platforms, the member link reduces its speed if there is an optics/cable issue, which effectively reduces the overall AE (Aggregate Ethernet) link speed. This is an undesired behavior since the matching speed is one of the mandatory criteria for a member link to join an AE.
PR Number
Synopsis
Category: QFX5100 Virtual Chassis related issues
1667952
jnxPowerSupplyFailure and jnxPowerSupplyOK might not be generated for backup FPC
Product-Group=junos
When the power cable is removed/inserted, jnxPowerSupplyFailure and jnxPowerSupplyOK might not be generated on backup FPC.
PR Number
Synopsis
Category: QFX5200/5110/5120/5210 Platform optics related issues
1653723
Port might be down after inserting specific SFP
Product-Group=junosvae
On QFX5100-48S platforms with QFX-5e img and 10G interface, insertion of transceivers- SFP-SX or SFP-LX10 into a 1G port might make other neighbour 10G ports down, affecting the related traffic.
PR Number
Synopsis
Category: QFX5200/5110/5120/5210 Platfom issues
1634495
Traffic loss might be observed on EX4650-48Y and QFX5120-48Y switches when there is a link flap
Product-Group=junos
On EX4650-48Y and QFX5120-48Y switches when there is a link flap, the link/interface might take more than expected time to come up resulting in increased traffic loss.
1646894
Restarting one of the FPCs may cause traffic loss in QFX VC scenario
Product-Group=junosvae
On QFX with the Virtual Chassis (VC) scenario, when traffic coming into master FPC and going out from the backup FPC, reboot the backup FPC, the master FPC still thinks the backup link is present, and "show lacp interface" also continues showing the backup link as collecting / distributing. Therefore, master FPC continues sending the echo reply through the backup link which fails since the backup is powered off, which might lead to a traffic drop.
PR Number
Synopsis
Category: Related to sw defects for K2-RE
1662913
The watchdog timeout is encountered and the system reboots after the 'request system halt' command executed
Product-Group=junos
On all platforms with RE-1800 & RE-2000, after the 'request system halt' command is executed, the watchdog timeout is encountered and causes the routing engine (RE) to fail to boot.
PR Number
Synopsis
Category: Interfaces related issues in RPDIssues related to interface
1659102
The rpd memory leak might be seen while processing vlan-ccc configuration
Product-Group=junos
On all Junos and Junos Evolved platforms, when deleting/adding the whole interface unit of family vlan-ccc, the rpd will observe a memory leak.
PR Number
Synopsis
Category: KRT Queue issues within RPD stuck queue, retries due to erro
1498087
Traffic loss might be seen if the routing instance is deactivated and then re-activated quickly
Product-Group=junos
In a routing instance with table next hop scenario (e.g., if EVPN routing instance is configured, the l2ald process creates a routing table and the EVPN adds a route pointing to this table as table next hop in the rpd process), if the routing table created within the routing instance is deleted and then re-added (e.g. deactivated and then re-activated the routing instance) very fast before the rpd can delete the route pointing to the table next hop, then the route in the rpd uses the staled table next hop, resulting in traffic loss. Sampling the configuration that delays the route deleting in the rpd increases the possibility of hitting the issue.
1583249
The rpd in backup might core and restart
Product-Group=junos
On all Junos and Evolved platforms, the rpd in the backup may core and restart when the forwarding-table is deleted.
1664527
The routing process on the device might crash when the IP address of local interface is changed to the IP address of BGP peer
Product-Group=junos
On all Junos and Junos Evolved platforms, the rpd process might crash when the IP address of local interfaces is changed to BGP peer's IP address. When the IP address is changed, Router NH is created. When this route is leaked to another routing instance, flag is set on the same Router NH instead of creating a new one. This leads to rpd crash. Core files are generated and some traffic impact might be seen.
PR Number
Synopsis
Category: Issues related route resolution routing infrastructure
1658277
Some L3VPN prefixes are not active because nexthop is not usable
Product-Group=junos
If preserve-nexthop-hierarchy knob was deconfigured and if no-propagate-ttl config within VRF is opposite to global config,some routes can be inactive. Secondary nexthops may not be resolved and active, hence L3VPN routes are not active.
PR Number
Synopsis
Category: RPD route tables, resolver, routing instances, static routes
1665094
Route leaking might happen with auto-export configuration
Product-Group=junos
On all Junos and Junos evolved platforms, if auto-export is configured under VRF, unexpected leaking of the routes could be observed.
PR Number
Synopsis
Category: For reporting bugs againist the RPM and TWAMP
1667716
The line cards MPC10/MPC11/LC-9600 might crash on Junos and EVO platforms
Product-Group=junos
On Junos platforms with MPC10/MPC11/LC-9600 linecard and all EVO platforms configured with TWAMP, the MPC10/MPC11 linecard might crash when the TWAMP client tries to create a session with the TWAMP server.
PR Number
Synopsis
Category: SW PRs for SCBE3 fabric
1606296
Fabric error might be seen when MPC10E to MPC2/MPC3/MPC4/MPC5/MPC6 based FPC fabric traffic is congested
Product-Group=junos
On the MX240/480/960 system with both MPC10E and MPC2/MPC3/MPC4/MPC5/MPC6 based FPCs are installed, when MPC10E sends high traffic to MPC4E or other mentioned cards as the destination, the destination line card will not be able to cope up with MPC10E traffic flow.
1612957
The PFE/SIB/SCBE/FPCs might reboot due to the unexpected fabric errors shown up on MX240/480/960 platforms
Product-Group=junos
In MX240/480/960 platforms with SCBE3-MX and Enhanced midplane scenario, in some rare cases, if flooding huge traffic from MPC7/MPC8/MPC9 to MPC2E/MPC3E/MPC4E/MPC5E and flapping the interface on MPC2E/MPC3E/MPC4E/MPC5E, it will cause the unexpected request time errors on MPC7/MPC8/MPC9 since the MPC2E/MPC3E/MPC4E/MPC5E might not be able to handle such high volume of requests, it will cause PFE destinations to become unreachable even when the fabrics are online. Then PFE/SIB/SCBE/FPCs might reboot automatically while these accumulated fabric errors hit the fabric connectivity restoration conditions of the Fabric Healing process (FHP).
PR Number
Synopsis
Category: SRX RTCOM module bugs
1588593
Updates were made to RTCOM to reduce its overall memory usage, improving holistic scale of Layer-7 services
Product-Group=junos
Updates were made to RTCOM to reduce its overall memory usage, improving holistic scale of Layer-7 services
PR Number
Synopsis
Category: security-intelligence feature on SRX
1638923
Kernel panic might be seen during boot
Product-Group=junos
On Junos platforms kernel panic might be seen during the boot sequence.
PR Number
Synopsis
Category: Trinity LU, IX, QX, MQ chip drivers, ucode & related SW
1651407
CCL-DT-BNG: show interface and monitoring interface (ifd level) counters are tripled.
Product-Group=junos
In a subscriber management scenario requiring four subscriber accurate accounting statistics per packet, three stats are handled correctly while the fourth one - ifd stat - is not handled correctly due to this PR. The net effect is only the ifd byte statistic may not be accurate while the ifd packet count is still accurate. Also there is no service or traffic impact due to this issue.
PR Number
Synopsis
Category: Issues related to broadband edge apps (PPP, DHCP) on Trio ch
1647214
DHCP Subscriber traffic might get dropped due to the rpf-check filter
Product-Group=junos
On all Junos platforms running BroadBand Edge(BBE) subscribers, when the rpf-check CLI knob is present in the configuration but the Reverse Path Forwarding (RPF) feature is not getting applied to certain subscribers which leads to DHCP subscriber traffic drop.
1668976
Traffic loss might be observed for the multicast traffic
Product-Group=junos
On all MX platforms where BBE subscriber services are configured, multicast traffic loss might be observed for subscribers if the multicast group id is larger than 255.
PR Number
Synopsis
Category: trinity pfe bridging, learning, stp, oam, irb software
1657983
The MPC crash might be observed for the IRB interface flap part of the layer 2 domain in a multicast scenario
Product-Group=junos
On MX platforms with MPC, due to the integrated routing and bridging (IRB) interface flapped MPC crash might be observed and core is generated.
PR Number
Synopsis
Category: Issues related to mgd, DAX API, DDL/ODL infrastructure, Juno
1590099
The ISSU might abort due to unsuccessful image validation on all SRX platforms
Product-Group=junos
On all SRX platforms, the image validation will fail when ISSU from an image earlier than 21.2R1 (with stable11 freebsd) to an image later than 21.2R1 (with stable12 freebsd) which will cause the ISSU will abort. This is due to incompatible BSD releases. This PR has enabled the no-validate option so that this validation can be skipped for future releases.
1628046
The process mgd may crash with errors if scripts synchronize is configured
Product-Group=junos
On every commit, when "system scripts synchronize" is configured, dop reference count increments (leaks). Over a period of time, juniper-config dop refcount increases infinitely and could reach the maximum value of 65535 and it overflows to zero. Once it hits zero, "insist error dop->do_refcount != 0" error is seen in the logs.
PR Number
Synopsis
Category: Virtual Private LAN Services
1655858
The Pseudo Wires might go down in VPLS scenario
Product-Group=junos
On all Junos/Junos Evolved platforms with VPLS (virtual private LAN service) deployed, deactivating and activating the neighbour under the default mesh-group might lead Pseudo Wires(PW) to go down. This happens when there is a change in default mesh-group and that might not be updating the PW status. This can be recovered by deactivating and activating the complete routing instance under the mesh-group.
PR Number
Synopsis
Category: Virtual Router Redundancy Protocol
1668280
The VRRP track might go down upon GRES
Product-Group=junos
On all Junos platforms, when Graceful Routing Engine Switchover (GRES) is performed on the Virtual Router Redundancy Protocol (VRRP) master, the VRRP track on the master may go down and might be stuck in the down state. This might trigger VRRP Master switchover and temporary traffic loss if the track route cost changes the priority.
PR Number
Synopsis
Category: usf nat related issues
1610977
Traffic might not be processed when mams-members are replaced in the AMS bundle
Product-Group=junos
On all MX platforms with SPC3 card having MAMs interface configured in AMS bundle, traffic/data packet loss might be seen. Packets might be seen discarded as "NAT allocation failures".
1659284
Multiple stale EIM mappings observed on Junos MX platforms due to the aging timer getting stuck
Product-Group=junos
On Junos MX platforms, NAT (Network Address Translation) allocation failures are seen in case of EIM (Endpoint Independent Mapping) where the mappings are leaked and become stale, that is, they do not age out. The aging timer gets stuck leading to a failed NAT session.
20.3R3-S5 - List of Known issues
PR Number
Synopsis
Category: Bug category for Mojito Royale Layer 2 implementation
1655511
The egress traffic is not tagged properly in a L2PT scenario
Product-Group=junos
On EX4400/EX4100 and QFX5120 platforms, in a Layer 2 protocol tunneling (L2PT) scenario, the egress traffic from network-to-network interface (NNI) ports on a device, to user-to-network interface (UNI) ports, remains untagged at the UNI end, which will impact the protocols enabled on the interface.
PR Number
Synopsis
Category: Bug category for Mojito Royale routing implementation
1655654
Few EX platforms does not generate ICMPv6 too big messages
Product-Group=junos
Few EX platforms may not generate ICMPv6 too long messages which could cause the path MTU (maximum transmission unit) discovery to fail. As a result, IPv6 session establishment may fail.
PR Number
Synopsis
Category: GNATS category to track PRs in Rodnik Platform area
1569230
The 40G DAC connection between EX9253 and the peers might not come up
Product-Group=junos
DAC cable might not come up in 40G mode between EX9253 when any interface on PIC0 of FPC 0 or FPC 1 is connected to the peers.
PR Number
Synopsis
Category: Category for all the Sazerac & Macallan platform related PRs
1667564
High numbers of PDs connected may result in high CPU utilization
Product-Group=junos
On EX2300 and EX3400 platforms, high CPU utilization may be observed when more PoE devices (more than 25 PDs) are connected to the switch.
PR Number
Synopsis
Category: VC Infrastructure
1669241
On JUNOS (EX4600, EX4650, QFX5k VC) platforms, line card might be disconnected from VC post master RE reboot
Product-Group=junos
On JUNOS EX4600, EX4650, QFX5k VC platforms, when master RE is rebooted, the line card might be disconnected from Virtual Chassis (VC). Packet Forwarding Engine (PFE) planned restart may be seen on the new backup due to which line card leaves and rejoins the VC automatically.
PR Number
Synopsis
Category: PRs for Subscriber Management Statistics daemon & libraries
1676049
Minor memory leak in 'bbe-statsd' daemon may be seen when subscriber-management is enabled on MX platforms
Product-Group=junos
On MX platforms, a minor memory leak may be seen over time for transient subscriber sessions which last for around 30 seconds or less. The issue is reproducible consistently and may result in 'bbe-statsd' daemon crash over time.
PR Number
Synopsis
Category: Bi Directional Forwarding Detection
1675921
Micro BFD session state in RE remain UP even peer side session is down.
Product-Group=junos
Any platforms with Micro BFD configured on member links of the LAG/ae interface, BFD Session state in RE remains as UP always even though PEER device has ceased.
1678016
Traffic drops due to the generation of the FPC core, which makes the system unstable.
Product-Group=junos
All Junos (other than MX) configured with sBFD responder with the following command: "set protocols bfd sbfd local-discriminator <>" which triggers FPC core and leads to drops traffic.
PR Number
Synopsis
Category: functionality related to Broadband Remote Access Server
1669284
Errors are seen when the accounting server source address is IPv6
Product-Group=junos
On all Junos platforms having a profile assigned to the RI (Routing Instance) and using a source IPv6 (Internet Protocol version6) address for the radius server, errors might be observed and the accounting services might not work in an expected manner.
PR Number
Synopsis
Category: Firewall Filter
1670622
Traffic loss may be observed when changing firewall configuration
Product-Group=junos
On MX platforms supporting MPC7/8/9 line cards, traffic loss may be observed if the firewall configuration changes are made when PFE 0 (Packet Forwarding Engine) is in a disabled state. It is a rare occurrence.
PR Number
Synopsis
Category: CoS support on DNX
1630255
VLAN priority may change at the egress end of the circuit
Product-Group=junos
On ACX5448 and ACX710 platforms, it is observed that VLAN(Virtual LAN) priority may change at the egress end of the circuit.
PR Number
Synopsis
Category: OAM support on DNX
1592571
[eoam] [eoamtag] ACX5448-D :: JUNOS:JDI_FT_REGRESSION:PROTOCOLS:ROUTING:EOAM:On delete remote-mep and and auto-discovery on R0, interface not going down on R1 where Action profile attached
Product-Group=junos
On deleting remote-mep and auto-discovery in the peer, RDI sent by peer device is not processed in DUT. Hence, action configured for RDI event in the action-profile is not happening as expected.
PR Number
Synopsis
Category: EX Diagnostics Software
1598805
The interface on SFP-T or SFP-SX might stop forwarding traffic on EX4600
Product-Group=junos
On EX4600, the interfaces on SFP-T or SFP-SX might stop forwarding traffic when MACSec and auto-negotiation is enabled on the ports. The interfaces would still show as up and the transmit and receive counters will increase. However, the transmit counters on the port will not increase.
PR Number
Synopsis
Category: PRs for Lagavulin PFE tracking
1603015
On EX4400 dot1x authentication may not work on EVPN/xlan enabled endpoints.
Product-Group=junos
On EX4400 dot1x authentication may not work on EVPN/xlan enabled endpoints. The issue is due to EAPOL packets received on VxLAN ports are not processed in hostpath.
PR Number
Synopsis
Category: SRX4100/SRX4200 Great Wall
1626562
A major alarm DPDK (data plane development kit) Tx stuck issue of SRX4100/4200
Product-Group=junos
On the SRX4100 and SRX4200 platforms, it can detect DPDK (data plane development kit) Tx stuck issue and trigger a major chassis alarm goes which might trigger RG1 failover to the healthy node. A DPDK reset will be triggered only to the stuck port and if the reset resolves the tx stuck issue, the major chassis alarm will go off.
PR Number
Synopsis
Category: IDP policy
1657056
The flowd core might be observed when IDP policy rulebase changes
Product-Group=junos
A change in IDP lsys policy configuration while the system is processing traffic may cause a flowd coredump in rare cases.
PR Number
Synopsis
Category: IPSEC/IKE VPN
1673391
High Control Plane CPU utilisation while the kmd process is stuck after the core file
Product-Group=junos
On all SRX platforms, during key management (kmd) core file, with VPN/Internet Key Exchange (IKE) implemented and a high number of file descriptors open, the kmd process will reach above 80% CPU utilisation and stay for a long period of time if the kmd process is stuck after the core file is generated.
PR Number
Synopsis
Category: Label Distribution Protocol
1680574
In an LDP -> BGP LU stitching scenario, Multiple LSPs will not be installed in the forwarding table, even if BGP Multipath and ECMP are enabled
Product-Group=junos
On all Junos and Junos OS Evolved Platforms, when BGP LU (Labeled Unicast) routes are exported to LDP (Label Distribution Protocol) to perform LDP->BGP-LU stitching, LDP installs only one NH(Next Hop) in the forwarding table instead of multiple NHs, even when BGP Multipath and ECMP are enabled. This issue will be seen for both EBGP (External Border Gateway Protocol) and IBGP (Internal Border Gateway Protocol) multipaths on PTX platforms and for only iBGP multipaths on all other platforms.
PR Number
Synopsis
Category: SW PRs for MPC10E Interfaces
1601049
Interface flap might trigger major alarm causing disble-pfe action when high priority scheduler is configured
Product-Group=junos
On all Junos platforms with MPC10E line-cards, repeated 100GE interface link flaps may result in loss of traffic going out of the interface. Each 100GE interface down event might not flush the stream and triggers a major alarm causing disable-pfe action. This is specific to interfaces configured with high priority scheduler. MPC11E card is not exposed.
PR Number
Synopsis
Category: MPC11 ULC fabric software related issues.
1658164
Fabric Destination error/Fabric plane in check state
Product-Group=junos
Fabric Plane check/error alarm can be seen due to overrun interrupt being set in MS-MPC line cards. Latency difference between the SFB2/SFB3 and the MS-MPC cards potentially causes overruns to increase during the traffic burst.
PR Number
Synopsis
Category: Multiprotocol Label Switching
1673348
CPU utilization of rpd process may reach 100% while reporting LSP states to pccd if the IS-IS update churn is high
Product-Group=junos
On all Junos and Junos Evolved platforms where PCEP (Path Computation Element Protocol) is provisioned, after IS-IS (Intermediate System-Intermediate System) PDU (Protocol Data Unit) flooding, rpd (routing protocol daemon) re-computes LSPs (Label Switched Path) and sends those to the pccd (path computation client daemon) which in turn reports those to PCE (Path Computation Element) for processing. If the update churn is high, this may cause the rpd to reach or get stuck at 100% CPU utilization.
PR Number
Synopsis
Category: For multicast snooping on MX
1637090
An IGMPv2 snooping proxy will originate IGMPv3 membership for a new group join request towards a multicast router
Product-Group=junos
On all MX platforms, in an IGMPv2-only (Internet Group Management Protocol) environment with two queriers (multicast router or switch), the IGMP snooping proxy device will originate an IGMPv3 membership request to join a new group towards a router, upon receiving the IGMPv2 query. The default IGMP query interval is 125 seconds. However, in the presence of two queriers, the IGMP proxy calculates the query interval based on the difference between queries received from the two queriers. This would cause issues in join/leave requests.
PR Number
Synopsis
Category: Kernel Multicast Infrastructure
1653920
Traffic blackhole might be seen due to next-hop install failure on Junos PTX platforms
Product-Group=junos
On Junos PTX platforms there might be a traffic blackhole which happens because of next-hop installation failure for multicast RSVP(Resource Reservation Protocol) P2MP(Point to Multipoint) traffic. This issue might only be encountered in a scaled RSVP P2MP environment after a network event which might cause reconvergence.
PR Number
Synopsis
Category: PRs requiring triage and/or fix in the PFE Peer Infra
1667674
The FPC might fail to initialize on Junos platforms
Product-Group=junos
On all Junos platforms, in a very corner case, the FPC (Flexible PIC Concentrators) might fail to initialize and remains in a stuck state when an FPC is installed or rebooted.
PR Number
Synopsis
Category: Paradise PFE Sflow feature
1616740
The dcpfe process might crash on QFX10K
Product-Group=junos
On QFX10k, spontaneous dcpfe process crash might be observed and core files are dumped possibly due to large data packets when sFlow is configured. This might result in FPC(Flexible PIC Concentrators) restarts, protocol and interface flaps. During the dcpfe restart, traffic loss and connectivity issue might be observed.
PR Number
Synopsis
Category: PFE L2
1667069
PVLAN IGMP packet is forwarded between Isolated ports and also duplicated to primary vlan port (Promiscous).
Product-Group=junos
When Isolated port receives IGMP packet, it should not be forwarded to other Isolated ports but was forwarded and also duplicated to primary vlan port (Promiscous).
PR Number
Synopsis
Category: Issue related to mcnh routing infrastructure within RPD
1663568
The forwarding plane is not updated properly in scaled MVPN scenario after receiving PIM leave messages
Product-Group=junos
On all Junos and Junos Evolved platforms, when IFLs from non-default routing instances are being added with the OIF scaling of more than 2000 there will be a spillover of IFLNHs into different next hops due to this the outgoing interfaces (OIFs) will not be deleted from multicast next-hop.
PR Number
Synopsis
Category: Non protocols specific issues in RPD policy options, stateme
1666001
ACX5448-D policy with install-nexthop, called in forwarding-table will not install next-hops properly with respect to the routing table
Product-Group=junos
ACX5448-D fails to install the next hop when a next-hop policy is configured in the forwarding table.
PR Number
Synopsis
Category: This would be category for IPSEC functionality on M/MX/T ser
1674585
The 'kmd' process may crash due to SA re-negotiation failure during IKE phase-1
Product-Group=junos
On platforms running Junos 16.2 onwards releases, if for some reason IKE (Internet Key Exchange) phase-1 SA (Security Association) re-keying fails, 'kmd' process may crash and the IPSec (Internet Protocol Security) tunnels may also get torn down. Most of the time, the reason is that the initiator changes its offerings after the initial successful key exchange.
PR Number
Synopsis
Category: Interface Issues seen on Stout cards (MPC7, MPC8, MPC9)
1651526
PCS Errored blocks count will increment after Junos software upgrade to 20.2R1 or above releases
Product-Group=junos
After a Junos upgrade to 20.2R1 or above releases with 100G-LR4 optics, Physical Coding Sublayer (PCS) Errored blocks and framing errors on 100G-LR4 interfaces are seen, which impacts traffic.
PR Number
Synopsis
Category: Authentication, Authorization, Accounting, PAM (RADIUS/tacpl
1662172
The CPU utilization might increase when a user login and logout to the device continuously
Product-Group=junos
When multiple users log in and log out using SSH public-private key authentication to the device every few seconds, then the CPU utilization might increase on all Junos and Junos OS Evolved platforms.
PR Number
Synopsis
Category: Issues related to mgd, DAX API, DDL/ODL infrastructure, Juno
1673176
"gethostbyname: Host name lookup failure" is displayed during commit
Product-Group=junos
On all SRX series platform with J-web enabled, "gethostbyname: Host name lookup failure" is displayed during commit
PR Number
Synopsis
Category: Issues related to Logging/Tracing, errmsg, eventd infrastruc
1611504
Syslog does not after upgrade
Product-Group=junos
On PTX10008/PTX10016 platforms, when both IPv4 and IPv6 Hosts are configured under syslog configuration, the IPv4 syslog might not log messages on the server after upgrading the device.
PR Number
Synopsis
Category: PRs related to vmhost platforms
1605915
Harmless error message might be seen when downgrading from 21.2/21.3/21.4 to 21.1 or older image on VMHost platform
Product-Group=junos
When performing downgrade from 21.2/21.3/21.4 to 21.1 or older image on VMHost platform, below harmless error messages might be seen during "request vmhost software add" command execution. mkdir: cannot create directory '/tmp/partdisk-V6pHko/jrootfs/junos': File exists. mkdir: cannot create directory '/tmp/partdisk-V6pHko/jrootfs/vm': File exists. mkdir: cannot create directory '/tmp/partdisk-V6pHko/jrootfs/spare': File exists.
1676003
Filesystem /dev/gpt/var size does not increase after software upgrade
Product-Group=junos
if "request vmhost software add fails due to "Not enough free space in Junos guest /var/tmp", and if the /dev/gpt/var size is 14GB.
PR Number
Synopsis
Category: Virtual Private Networks - rpd
1661542
When using BGP "forwarding-context" + eBGP-LU + L3VPN, the traffic drop will be observed when vrf-table-label is enabled
Product-Group=junos
On all Junos and Junos OS Evolved platforms, BGP (Border Gateway Protocol) forwarding-context + eBGP-LU (External Border Gateway Protocol)-Labeled Unicast + L3VPN (Layer 3 Virtual private network) traffic drop will be observed if "vrf-table-label" knob is configured.
PR Number
Synopsis
Category: Virtual Router Redundancy Protocol
1650873
Authenitcation key can not be configured more than 15 character
Product-Group=junos
Dual masters are seen in VRRP when the devices are running two different Junos versions.
Modification History
First publication 2022-09-16
20.3R3-S5: Software Release Notification