Alert Type

PSN - Product Support Notification
Low/NotificationSoftware Release Notification
Low/NotificationSoftware Release Notification

Product Affected

ACX, EX, MX, NFX, PTX, QFX, SRX

Alert Description

Junos Software Service Release version 21.4R2-S2 is now available for download from the Junos software download site

Download Junos Software Service Release:

  1. Go to Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts

Solution

Junos Software service Release version 21.4R2-S2 is now available.

21.4R2-S2 - List of Fixed issues

PR NumberSynopsisCategory: Mojito PFE
1675977The fxpc process crash might be observed on EX4300 and EX4300-VC platforms
Product-Group=junos		On EX4300 platforms, if there are mac-move events, the fxpc (Packet Forwarding Engine manager) crash might be observed due to race conditions.
PR NumberSynopsisCategory: NFX Series Platform Software
1674872VNF's Getting DHCP Address from virbr0 with Default Route
Product-Group=junosvae		VNF with DHCP configured on virbr0 is getting a default route and it should not
PR NumberSynopsisCategory: Bi Directional Forwarding Detection
1678016Traffic drops due to the generation of the FPC core, which makes the system unstable.
Product-Group=junos		All Junos (other than MX) configured with sBFD responder with the following command: "set protocols bfd sbfd local-discriminator <>" which triggers FPC core and leads to drops traffic.
PR NumberSynopsisCategory: Border Gateway Protocol
1635390BGP routes might be left stale on the router
Product-Group=junos		On all Junos and Junos Evolved platforms, if the BGP peer goes down, and the very last route in the list is marked as a high priority, BGP might assume no more routes to delete, causing routes to be stale.
1660456Incorrect inactive routes are being propagated to neighbors with add-path
Product-Group=junos		On all Junos and Junos Evolved platforms that support add-path which is used to advertise inactive external BGP routes from the VRF table, changes to that route may not be propagated. To avoid the issue please use advertise-external knob instead of add-path to advertise not best eBGP routes internally.
PR NumberSynopsisCategory: Class of Service
1649510The cosd process might not be able to send unbinds for rewrites post a certain sequence of operations are performed
Product-Group=junos		On All Junos platforms, in certain conditions, a stale rewrite rule entry is left behind in the PFE and the corresponding kernel state is also wrong. The pre-conditions to note this phenomenon include a sequence of AE specific operations along with the presence of COS (class-of-service) configuration. For example, let us say, we have config-1, which defines a set of AE bundles and associates COS rewrite rules under the bundle. Now we perform a sequence of operations to delete AE bundle and then add it back as well. In between, we remove class-of-service and add back class-of-service to the AE bundle as well. Now, when we override this config-1 with a new config-2 that defines the same AE bundle but an updated rewrite rule (with additional forwarding classes and mappings), it is possible to see a previous rewrite rule still being used for AE specific IFLs. At times a stale unused rewrite rule is left behind if config-2 no longer uses the previous rewrite rule that came in from config-1. To recover from this problem, we need to restart cosd twice or do an NSR GRES followed by deactivate/activate of class-of-service.
PR NumberSynopsisCategory: Firewall Filter
1647669mib2d core hitting @mib2d_fwstats_async_handler_cb rtslib_async_process_msg during GRES testing with page pooling enabled
Product-Group=junos		mib2d core hitting @mib2d_fwstats_async_handler_cb rtslib_async_process_msg during GRES testing with page pooling enabled
PR NumberSynopsisCategory: FIB telemetry, fibtd, libocaft repositories
1662999network-instance name for streaming telemetry to be changed from default to DEFAULT to align with CONFIG stanza
Product-Group=junos		for ONDATRA test case which tested this with different network-instance names - DEFAULT. test is failing. for TEST to pass ,use network-instance names - default.
PR NumberSynopsisCategory: SW PRs related to Vale Edge (MX10K) development
1655089The 1G port always stays down while changing of 10G interface lane speed to 1G
Product-Group=junos		Due to an incorrect hardware setting, the 1G port stays down while changing of 10G interface lane speed to 1G and vice versa on LC2101.
PR NumberSynopsisCategory: PFE L2
1669857The Native VLAN tagging might not be working as expected
Product-Group=junos		On QFX5110 platforms, the Native VLAN feature might not be working as expected, as the interface even if configured with native VLAN, the traffic egresses out with tagged VLAN instead of untagged traffic.
PR NumberSynopsisCategory: QFX10008/16 QFX10002 Ultimat/Elit platform related issues -
1676740,The traffic doesn't re-route quickly causing traffic blackholing
Product-Group=junos		On all VMHOST based platforms, traffic blackholing happens because the traffic doesn't re-route quickly as chassisd doesn't recognize an FPC failure from a BAD_VOLTAGE notification.
PR NumberSynopsisCategory: Non sparks issues in jflow/monitoring services
1668521MX platforms with specific line cards are affected due to increase in HEAP memory
Product-Group=junos		MX platforms with specific line cards get affected when RE based sampling is enabled which causes increase in FPC's HEAP memory usage.
PR NumberSynopsisCategory: Interface Issues seen on Stout cards (MPC7, MPC8, MPC9)
1651526PCS Errored blocks count will increment after Junos software upgrade to 20.2R1 or above releases
Product-Group=junos		After a Junos upgrade to 20.2R1 or above releases with 100G-LR4 optics, Physical Coding Sublayer (PCS) Errored blocks and framing errors on 100G-LR4 interfaces are seen, which impacts traffic.
PR NumberSynopsisCategory: ZT/YT pfe firewall software
1649499The MPC might crash or the traffic may be silently dropped/discarded
Product-Group=junos		The firewall filter might be incorrectly updated in the Packet Forwarding Engine (PFE) when large-scale filters, applied on any of the supported bind points, undergo repeated load and unload. It can result in a core and FPC will be restarted. It's a timing issue
PR NumberSynopsisCategory: ZT/YT pfe, vpls, mesh group software
1669765Interoperability issue between legacy line cards and MPC10E/11E causes L2 packet drop
Product-Group=junos		Due to a software defect seen in interoperability scenarios on newer AFT (Advanced Forwarding Toolkit) based MX cards (MPC10E and MPC11E), packets entering through legacy (non-AFT) card interfaces and exiting through AE (Aggregated Ethernet) interfaces via IRB (Integrated routing and bridging) will get dropped.
PR NumberSynopsisCategory: trinity pfe l3 forwarding issues
1656499GRE-in-GRE encapsulated traffic might be dropped when the recursion-control bit is set to non-zero, which does not comply with RFC standard
Product-Group=junos		On all Junos MX platforms, the Generic Routing Encapsulation (GRE) packet might be dropped in a GRE-in-GRE scenario if the recursion-control bit is set to non-zero. This problem is not seen with single GRE encapsulation.
PR NumberSynopsisCategory: Authentication, Authorization, Accounting, PAM (RADIUS/tacpl
1662172The CPU utilization might increase when a user login and logout to the device continuously
Product-Group=junos		When multiple users log in and log out using SSH public-private key authentication to the device every few seconds, then the CPU utilization might increase on all Junos and Junos OS Evolved platforms.
PR NumberSynopsisCategory: Issues related to DAX APIs
1669637Periodic rebalancing of subscribers over AE interface might not work
Product-Group=junos		On all Junos and Junos Evolved platforms with scaled PPPoE (Point-to-Point Protocol over Ethernet) subscribers over static vlan-demux-interfaces over AE (Aggregated Ethernet) interface, if the child member links are flapped, periodic rebalancing of subscribers over AE interface might not happen and might lead to congestion on a particular link.
PR NumberSynopsisCategory: Issues related to mgd, DAX API, DDL/ODL infrastructure, Juno
1656565Commit and commit check fails when the knob "interface-range" is configured
Product-Group=junos		On all Junos and Junos Evolved platforms, when the knob "interface-range" is configured commit and commit check fails.
1671038Config error after upgrade when modifying group for lsp auto-bandwidth /config/juniper.conf:164:(39) syntax error: adjust-interval
Product-Group=junos		Config error after upgrade when modifying group for lsp auto-bandwidth /config/juniper.conf:164:(39) syntax error: adjust-interval.
1673176"gethostbyname: Host name lookup failure" is displayed during commit
Product-Group=junos		On all SRX series platform with J-web enabled, "gethostbyname: Host name lookup failure" is displayed during commit
 
 

21.4R2-S2 - List of Known issues

PR NumberSynopsisCategory: Track PRs in BGP BMP area & is part of BGP inside RPD.
1635143The rpd may crash due to memory pressure for high BGP scale with flapping route and BGP Monitoring Protocol (BMP) collector/station is very slow on all Junos and EVO platforms
Product-Group=junos		On all devices running Junos OS or Junos OS Evolved, where this is a high BGP scale with flapping route and the BGP Monitoring Protocol (BMP) collector/station is very slow, the rpd process might crash due to memory pressure.
PR NumberSynopsisCategory: Firewall Filter
1662955The MPC/FPC crash is seen on specific LC's running BGP Flowspec
Product-Group=junos		On Junos platforms with specific MPC/FPC model, crash may happen in certain scenario with BGP flowspec. With the BGP flowspec filter, the scaled prefix-list spread across the terms with a total prefix-list-scale. While processing the BGP flowspec filter with scale, it takes almost 6 minutes to consume the filter into ASIC during convergence. Since the PFE has a time max limit which is lesser than 6 scaled convergence time, PFE crash happens during the threshold handler. This causes the services or traffic impact running through the FPC until the FPC comes online and configurations are converged again.
PR NumberSynopsisCategory: Report install issues on BSDX (Occam) images
1665411JDI-RCT:M/Mx: errors spew on junos upgrade @ rm: //opt/sdk/service-packages/...: is a directory
Product-Group=junos		A harmless error from activation of jservices packages
PR NumberSynopsisCategory: Atlas Integrated Routing & Bridging (IRB) module
1629345Inter vlan ipv6 traffic loss for some hosts after configuration remove and restore.
Product-Group=junos		For a topology with VSTP and VRRP configured and IPV6 traffic, if VSTP bridge priority is changed a couple of times (to trigger toggling of root bridge), it is possible that V6 traffic drop is seen on some of the streams.
PR NumberSynopsisCategory: l2 flow module
1599891OSPF neighbor won't establish under Transparent mode when neighborship across different zone
Product-Group=junos		Some of the OSPF neighborship might not able to establish after system bootup when the neigborship connect to SRX via different zone under transparent mode
PR NumberSynopsisCategory: SW PRs for MPC10E Chassisd
1664448The command "show chassis fpc" shows inaccurate information about heap memory
Product-Group=junos		The command "show chassis fpc" shows inaccurate information about heap memory in output.
PR NumberSynopsisCategory: Multiprotocol Label Switching
1672804The rpd crash might be observed with Container LSPs
Product-Group=junos		On all Junos/EVO platforms, the rpd process might get crash if the Container LSP (Label Switch Path) is associated with an external-controller.
1673348CPU utilization of rpd process may reach 100% while reporting LSP states to pccd if the IS-IS update churn is high
Product-Group=junos		On all Junos and Junos Evolved platforms where PCEP (Path Computation Element Protocol) is provisioned, after IS-IS (Intermediate System-Intermediate System) PDU (Protocol Data Unit) flooding, rpd (routing protocol daemon) re-computes LSPs (Label Switched Path) and sends those to the pccd (path computation client daemon) which in turn reports those to PCE (Path Computation Element) for processing. If the update churn is high, this may cause the rpd to reach or get stuck at 100% CPU utilization.
PR NumberSynopsisCategory: For multicast snooping on MX
1636261Message 'Initialize libjtask-license first! for mcsnoopd' is seen after committing configuration
Product-Group=junos		On all Junos platforms, a harmless message is observed on the terminal output after committing the multicast snooping configuration.
PR NumberSynopsisCategory: SRX Argon module bugs
164666121.3R2:SRX_RIAD:srx1500,srx4200:SKYATP:IMAP/IMAPS Email permitted counter is not incremented in AAMW email statistics while testing whole email block.
Product-Group=junos		The SKYATP:IMAP/IMAPS Email permitted counter may have incorrect value under certain conditions.
PR NumberSynopsisCategory: ZT/YTpfe bridging, learning, stp, oam, irb software
1648059Interoperability issue between TRIO line cards and MPC10E and MPC11E AFT cards cause incorrect egress load balancing over Aggregated Ethernet links
Product-Group=junos		On MX platforms, due to a software defect seen in interoperability scenarios on newer AFT-based MX cards (MPC10E and MPC11E), packets entering through legacy(non-AFT) card interfaces and exiting through AE interfaces via IRB may get incorrectly load balanced.
PR NumberSynopsisCategory: ZT/YT pfe l3 forwarding issues
1636785FRR loss of around 18- 20 seconds seen during LAG bundle failure triggers with scaled configuration
Product-Group=junos		FRR loss of around 18- 20 seconds seen during LAG bundle failure triggers with scaled configuration
PR NumberSynopsisCategory: trinity pfe stateless firewall software
1668818JDI-RCT:M/Mx: MicroBFD session is getting flapped after loading the configs.
Product-Group=junos		Micro BFD sessions which are running in distributed mode may flap if ppm thread does not get scheduled on time. This issue is applicable to MPC9 and below trio based line cards.
PR NumberSynopsisCategory: Issues related to Logging/Tracing, errmsg, eventd infrastruc
1632297eventd core found @ eventd_event_process_queue, eventd_allmsg_reader
Product-Group=junos		"eventd" process may produce core files. There is no impact on system operation.
 

Modification History

First publication 2022-09-22