Alert Type
PSN - Product Support Notification
Risk
Risk Description
Low/Notification
Software Release Notification
Impact
Impact Description
Low/Notification
Software Release Notification
Product Affected
ACX, EX, MX, NFX, PTX, QFX, SRX, vSRX
Alert Description
Junos Software Service Release version 21.3R3-S2 is now available for download from the Junos software download site
Download Junos Software Service Release:
Go to
Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select
Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as need and follow the prompts
Solution
Junos Software service Release version 21.3R3-S2 is now available.
21.3R3-S2 - List of Fixed issues
PR Number
Synopsis
Category: Software build tools (packaging, makefiles, et. al.)
1641712
Enhanced subscriber management might not work when Junos is installed using USB image
Product-Group=junos
On all Junos platforms, USB installation fails to bring up subscriber daemons while installing Junos via USB. Subscriber daemons keep crashing and never bring up subscribers. It impacts enhanced subscriber management services.
PR Number
Synopsis
Category: Bug category for Mojito Royale Layer 2 implementation
1655511
The egress traffic is not tagged properly in a L2PT scenario
Product-Group=junos
On EX4400/EX4100 and QFX5120 platforms, in a Layer 2 protocol tunneling (L2PT) scenario, the egress traffic from network-to-network interface (NNI) ports on a device, to user-to-network interface (UNI) ports, remains untagged at the UNI end, which will impact the protocols enabled on the interface.
PR Number
Synopsis
Category: Category for all the Sazerac & Macallan PFE PRs
1647209
DHCP traffic might be dropped when DHCP-security and RTG are enabled
Product-Group=junos
On EX2300, EX2300-48MP, and EX3400 platforms, when DHCP-security and Redundant Trunk Group (RTG) are enabled clients connected over RTG might not get DHCP IP and DHCP traffic might be dropped.
PR Number
Synopsis
Category: qfx-sw-mclag
1579016
VRRP flaps between MC-LAG peers
Product-Group=junos
On all Junos platforms, On deletion/addition of MC-AE (Multi Chassis Aggregated Ethernet ) IFD (Interface Device), VRRP (Virtual Router Redundancy Protocol) flaps between the MC-LAG peers.
PR Number
Synopsis
Category: MPLS for ACX 500,1k,2k,4k,5k series
1665178
ACX5048 after upgrade to 20.4R3-S3 VPLS multihoming is not working
Product-Group=junos
In VPLS MH cases, the standby UNI ifl in backup router will be programmed in disable state, by adding the UNI interface to invalid vpn id in HW. During switch over the UNI ifl will be deleted and will be added under the VPLS instance VPN id. In issue case, UNI interface added under invalid VPN id in backup router is tried to deleted by passing the VPLS instance vpn id, causing the issue. This issue is applicable only for ACX5k series.
PR Number
Synopsis
Category: BBE Advanced Services related issues
1657027
22.2R1:: MISC:: mspmand core found @sarena_free @mum_free @jsf_shm_free @jssl_mem_pool_free @jsf_openssl_free @CRYPTO_free @ssl_cert_free @jssl_config_dtor @msvcs_plugin_send_control_rt
Product-Group=junos
When service-set is configured with Syslog and SSL (secure Syslog), mspmand will core and might cause traffic disruption.
PR Number
Synopsis
Category: BBE interface related issues
1663689
Subscribers will be stuck in the initializing or terminating state
Product-Group=junos
On all MX platforms with Enhanced subscriber-management configured, subscribers can get stuck in the initializing and terminating state during the stress test( Graceful switchover(GRES)/FPC Restart/Daemons restart).
PR Number
Synopsis
Category: Border Gateway Protocol
1660456
Incorrect inactive routes are being propagated to neighbors with add-path
Product-Group=junos
On all Junos and Junos Evolved platforms that support add-path which is used to advertise inactive external BGP routes from the VRF table, changes to that route may not be propagated. To avoid the issue please use advertise-external knob instead of add-path to advertise not best eBGP routes internally.
1669716
The rpd crash is observed while making configurational changes
Product-Group=junos
On all Junos and Junos Evolved platforms, which supports protocol BGP (Border Gateway Protocol), RPD (Routing Protocol daemon) crash is seen when a eBGP peering interface is moved to a "no-forwarding" instance and resetting the BGP peer.
1671081
The rpd can crash while route exchange using BGP and LDP in a rare scenario
Product-Group=junos
The rpd (routing protocol daemon) crash happens when a non-BGP (Border Gateway Protocol) route is exported via LDP (Label Distribution Protocol) and later on, if the same prefix advertised by BGP is received, we select that as the forwarded route rather than the already advertised route. This is due to the logic in the forwarding route to pick the BGP route for the BGP-owned routes rather than the active route. This is a rare case and the system recovers by itself until the next event.
PR Number
Synopsis
Category: Class of Service
1675781
QoS may not work as expected on AE interfaces with explicit-null label
Product-Group=junos
On all Junos platforms having explicit-null label along with other labels, the QoS (Quality of Service) may not work in an expected manner for AE(Aggregated Ethernet) interfaces. This is because AE interfaces do not consider the explicit-null label which carries the exp bits and thus the exp bits carried are not considered for classification by PHP (Penultimate Hop Popping) router.
PR Number
Synopsis
Category: Firewall Filter
1670622
Traffic loss may be observed when changing firewall configuration
Product-Group=junos
On MX platforms supporting MPC7/8/9 line cards, traffic loss may be observed if the firewall configuration changes are made when PFE 0 (Packet Forwarding Engine) is in a disabled state. It is a rare occurrence.
PR Number
Synopsis
Category: Firewall support for DNX
1648968
If a firewall has a log action and it's applied on physical interface or lo0, the LDP can't go up
Product-Group=junos
On ACX5448 platform, if a firewall has a log action and it's applied on physical interface or lo0, the LDP neighbor can't go up.
PR Number
Synopsis
Category: VxLAN specific
1665828
MAC-IP bindings for IPv4 (ARP) and IPv6 (ND) may not be processed for IRB interfaces in an EVPN scenario
Product-Group=junos
On all Junos and Junos Evolved platforms, when EVPN (Ethernet Virtual Private Network) related configuration is introduced from baseline, due to a rare timing issue between the IRB (Integrated Routing and Bridging) interfaces coming up and an attempt is made by the 'l2ald' (l2 address learning) daemon to process the corresponding MAC-IP entries, this issue may occur. This may also occur when IRB logical units are activated and deactivated.
PR Number
Synopsis
Category: Report install issues on BSDX (Occam) images
1665411
JDI-RCT:M/Mx: errors spew on junos upgrade @ rm: //opt/sdk/service-packages/...: is a directory
Product-Group=junos
A harmless error from activation of jservices packages
PR Number
Synopsis
Category: jl2tpd daemon
1667950
VMcore or RE crash might be triggered due to the memory corruption when the FPC is restarted for LNS subscribers
Product-Group=junos
On all MX platforms, when Flexible PIC Concentrators (FPCs) restart for L2TP network server (LNS) subscribers stacked over aggregated service interface (asi) and LNS subscribers belong to more than one routing instance causes the VMcore or Routing Engine (RE) crash and brings down all the traffic.
PR Number
Synopsis
Category: IPSEC/IKE VPN
1663364
Packets traversing through a policy-based VPN get dropped when PowerMode is enabled
Product-Group=junos
On SRX4K/SRX5K/vSRX platforms, packets through policy-based VPN (Virtual Private Network) tunnels, where the loopback interface is used as an external interface, get dropped when PowerMode is enabled.
1673391
High Control Plane CPU utilisation while the kmd process is stuck after the core file
Product-Group=junos
On all SRX platforms, during key management (kmd) core file, with VPN/Internet Key Exchange (IKE) implemented and a high number of file descriptors open, the kmd process will reach above 80% CPU utilisation and stay for a long period of time if the kmd process is stuck after the core file is generated.
PR Number
Synopsis
Category: SW PRs for MPC10E Chassisd
1664448
The command "show chassis fpc" shows inaccurate information about heap memory
Product-Group=junos
The command "show chassis fpc" shows inaccurate information about heap memory in output.
PR Number
Synopsis
Category: MPC11 ULC platform software related issues.
1647622
Regressions : [Segment Routing IPv6] : Ping verification is failing + VERIFY FAILED: verify_ping:ping On Devices: ['r0']
Product-Group=junos
In the IPv6 segment routing deployment, packets are sent out with the wrong ethernet type.
PR Number
Synopsis
Category: Multiprotocol Label Switching
1672804
The rpd crash might be observed with Container LSPs
Product-Group=junos
On all Junos/EVO platforms, the rpd process might get crash if the Container LSP (Label Switch Path) is associated with an external-controller.
PR Number
Synopsis
Category: For multicast snooping on MX
1636261
Message 'Initialize libjtask-license first! for mcsnoopd' is seen after committing configuration
Product-Group=junos
On all Junos platforms, a harmless message is observed on the terminal output after committing the multicast snooping configuration.
1672488
MCSNOOPD will be restarted and will again learn the states after core
Product-Group=junos
On all JUNOS and EVO platforms, with IGMP/MLD with EVPN configured.
PR Number
Synopsis
Category: SW PRs related to Vale Edge (MX10K) development
1655089
The 1G port always stays down while changing of 10G interface lane speed to 1G
Product-Group=junos
Due to an incorrect hardware setting, the 1G port stays down while changing of 10G interface lane speed to 1G and vice versa on LC2101.
PR Number
Synopsis
Category: Kernel-only Base FreeBSD Infrastructure
1668090
Junos upgrade might fail due to file system corruption
Product-Group=junos
On all Junos platforms, file system corruption can result in a corrupted package/db which might lead to an upgrade failure.
PR Number
Synopsis
Category: Kernel Multicast Infrastructure
1653920
Traffic blackhole might be seen due to next-hop install failure on Junos PTX platforms
Product-Group=junos
On Junos PTX platforms there might be a traffic blackhole which happens because of next-hop installation failure for multicast RSVP(Resource Reservation Protocol) P2MP(Point to Multipoint) traffic. This issue might only be encountered in a scaled RSVP P2MP environment after a network event which might cause reconvergence.
PR Number
Synopsis
Category: Kernel Tunnel Interface Infrastructure
1676912
IS-IS packet drop observed for packets having GRE over FTI-VXLAN header
Product-Group=junos
All Junos platforms face the issue of IS-IS (Intermediate System-to-Intermediate System) packet drop where the packet headers are GRE (Generic routing encapsulation) over FTI-VXLAN (Flexible Tunnel Interface-Virtual Extensible LAN). Such packets are dropped at sender side kernel in the egress direction due to incorrect handling.
PR Number
Synopsis
Category: PFE L2
1676772
VLAN translation mapping gets deleted when one of the member interface removed from LAG
Product-Group=junos
On all QFX5k, EX4650 and EX4600 platforms, if port has VLAN translation configuration and LAG interfaces connected on same FPC then incoming traffic can drop if one member of LAG interface is deleted/removed.
PR Number
Synopsis
Category: All issues related to L3 data-plane/forwarding
1667751
Multihop BFD sessions might remain down in inline mode
Product-Group=junos
On all QFX10002 platforms, multihop Bidirectional Forwarding Detection (BFD) over routing instance with inline mode configuration keeps the BFD sessions down.
PR Number
Synopsis
Category: QFX VCCP related
1646561
VCP neighborship might not be formed on the LX4 40G VCP port
Product-Group=junos
On all QFX5100 Virtual Chassis platforms, after the reboot, Virtual Chassis port (VCP) ports may not establish a VCP connection and Cyclic Redundancy Check (CRC) errors are also observed.
1669702
FPC1 is getting disconnected after ISSU and before switchover while checking ISSU status
Product-Group=junosvae
On QFX5120-48T platforms with VC setup, FPC1 is getting disconnected after In-Service-Software-Upgrade(ISSU)/Nonstop Software Upgrade (NSSU) and before switchover while checking ISSU status.
PR Number
Synopsis
Category: QFX5100 Interface related issues
1669436
On specific QFX5k platforms, member links may reduce their configured speed when the other side doesn't have auto-negotiation disabled
Product-Group=junos
On QFX5110, QFX5120, QFX5200-32C and QFX5100 Junos platforms, the member link reduces its speed if there is an optics/cable issue, which effectively reduces the overall AE (Aggregate Ethernet) link speed. This is an undesired behavior since the matching speed is one of the mandatory criteria for a member link to join an AE.
PR Number
Synopsis
Category: QFX5200/5110/5120/5210 Platfom issues
1677376
The ge interface of QFX5110-48s-4c stay down post connected ACX device reboot
Product-Group=junos
On Junos QFX5110-48s-4c platform, when ge port of QFX5110-48s-4c is connected to em0 of ACX, it is observed that the ge interface of QFX5110-48-4c stay down post ACX device reboot. Due to this, all the traffic running on particular interface will be impacted.
PR Number
Synopsis
Category: Non protocols specific issues in RPD policy options, stateme
1670998
The rpd process crashes whenever it is getting shut down with router reboot, rpd restart, RE switchover, software upgrade
Product-Group=junos
The routing process daemon crashes whenever the rpd process is getting shutting down with router reboot, rpd restart, RE switchover, and software upgrade with Border Gateway Protocol configured on the device.
PR Number
Synopsis
Category: Non sparks issues in jflow/monitoring services
1668521
MX platforms with specific line cards are affected due to increase in HEAP memory
Product-Group=junos
MX platforms with specific line cards get affected when RE based sampling is enabled which causes increase in FPC's HEAP memory usage.
PR Number
Synopsis
Category: SW PRs for SCBE3 fabric
1625820
Fabric request timeouts and fabric healing occur
Product-Group=junos
On MX platforms, the MPC10E-10C-MRATE went offline/online due to FO (Fabric out) timeouts.
PR Number
Synopsis
Category: This would be category for IPSEC functionality on M/MX/T ser
1674585
The 'kmd' process may crash due to SA re-negotiation failure during IKE phase-1
Product-Group=junos
On platforms running Junos 16.2 onwards releases, if for some reason IKE (Internet Key Exchange) phase-1 SA (Security Association) re-keying fails, 'kmd' process may crash and the IPSec (Internet Protocol Security) tunnels may also get torn down. Most of the time, the reason is that the initiator changes its offerings after the initial successful key exchange.
1680775
The dynamic tunnel route gets removed when a new tunnel is brought up for the same selector
Product-Group=junos
On M/MX platforms, a dynamic tunnel route (pointing to the inside interface) gets removed when a new tunnel is brought up for the same selector. When the ARI (Auto Route Insertion) route is added for two or more DEP (Dynamic End Point) tunnels belonging to two different service sets with the same selector (destination address), the ARI route gets overwritten by the tunnel which comes up last in the order, leading to traffic drop.
PR Number
Synopsis
Category: SRX Argon module bugs
1666420
SRX alarming "SMS control channel down" without SMS feature configured
Product-Group=junos
At times an AAMW connection issue can trigger an SMS Control channel down alarm even when the SMS feature is not configured on the device. It is safe to ignore the SMS alarm if the feature is not in use.
1675722
A FlowD crash might occur when AAMW (Advanced-Anti-Malware) encounters a memory leak
Product-Group=junos
A memory leak may occur when running Advanced-Anti-Malware (AAMW/ATP) which can lead to a FlowD crash.
PR Number
Synopsis
Category: Interface Issues seen on Stout cards (MPC7, MPC8, MPC9)
1651526
PCS Errored blocks count will increment after Junos software upgrade to 20.2R1 or above releases
Product-Group=junos
After a Junos upgrade to 20.2R1 or above releases with 100G-LR4 optics, Physical Coding Sublayer (PCS) Errored blocks and framing errors on 100G-LR4 interfaces are seen, which impacts traffic.
PR Number
Synopsis
Category: ZT/YTpfe bridging, learning, stp, oam, irb software
1663725
Trinity-based line cards with VPLS and CFM configuration may crash when the indirect NH associated with LSI IFL is deleted
Product-Group=junos
On MX platforms, the trinity-based line cards with VPLS (Virtual Private LAN Service ) and CFM (connectivity-fault-management) configuration might get crash when the indirect NH is associated with LSI (label-switched interface) IFL is deleted. When this happens, FPC may crash. However, it will come up again and the services will be restored.
PR Number
Synopsis
Category: ZT/YT pfe, vpls, mesh group software
1669765
Interoperability issue between legacy line cards and MPC10E/11E causes L2 packet drop
Product-Group=junos
Due to a software defect seen in interoperability scenarios on newer AFT (Advanced Forwarding Toolkit) based MX cards (MPC10E and MPC11E), packets entering through legacy (non-AFT) card interfaces and exiting through AE (Aggregated Ethernet) interfaces via IRB (Integrated routing and bridging) will get dropped.
PR Number
Synopsis
Category: Authentication, Authorization, Accounting, PAM (RADIUS/tacpl
1662172
The CPU utilization might increase when a user login and logout to the device continuously
Product-Group=junos
When multiple users log in and log out using SSH public-private key authentication to the device every few seconds, then the CPU utilization might increase on all Junos and Junos OS Evolved platforms.
PR Number
Synopsis
Category: Issues related to DAX APIs
1669637
Periodic rebalancing of subscribers over AE interface might not work
Product-Group=junos
On all Junos and Junos Evolved platforms with scaled PPPoE (Point-to-Point Protocol over Ethernet) subscribers over static vlan-demux-interfaces over AE (Aggregated Ethernet) interface, if the child member links are flapped, periodic rebalancing of subscribers over AE interface might not happen and might lead to congestion on a particular link.
PR Number
Synopsis
Category: Issues related to mgd, DAX API, DDL/ODL infrastructure, Juno
1673176
"gethostbyname: Host name lookup failure" is displayed during commit
Product-Group=junos
On all SRX series platform with J-web enabled, "gethostbyname: Host name lookup failure" is displayed during commit
PR Number
Synopsis
Category: For GPRS security features on highend SRX series
1673879
GTP control packets might be incorrectly dropped/passed if there is more than one APN IMSI filter configured
Product-Group=junos
On SRX platforms, during General Packet Radio Services (GPRS) Tunneling Protocol (GTP) inspection if there is more than one APN IMSI (Access Point Name or International Mobile Subscriber Identification) filter configured in the GTP profile, the filter may incorrectly drop/pass CrPdpRequest and CrSessRequest GTP Control packets.
PR Number
Synopsis
Category: Virtual Router Redundancy Protocol
1666519
The hold time of EVPN DF election takes time and it brings BUM traffic loss
Product-Group=junos
On Junos platform, it takes time to elect EVPN DF when LAG interface as a part of EVPN multihoming comes up. As a result, BUM traffic could be lost for a while.
PR Number
Synopsis
Category: usf nat related issues
1632278
DSLite might not work on MX platforms installed with MPC7E line card and SPC3 service PIC
Product-Group=junos
DSLite (Dual-Stack Lite) may not work on MX platforms when MPC7E line card and SPC3 service PIC (Physical Interface Card) are installed and subsequently NAPT44 (Network Address Port Translation) will not work.
PR Number
Synopsis
Category: usf service set related issues
1672819
Traffic impact might be seen due to an unexpected reboot of SPC3 card
Product-Group=junos
On all MX platforms with SPC3 service card installed, when endpoint independent filtering is configured along with DS-LITE (Dual Stack Lite) then PIC might reboot along with a core dump.
PR Number
Synopsis
Category: usf sfw and nat related issues
1674381
The "nsd" may crash post NAT rule configuration change
Product-Group=junos
On Junos platforms with MX-SPC3 services card, this issue is seen due to an error condition for a memory allocation, while changing the NAT (Network Address Translation) rule configuration might crash "nsd" (Network Security Daemon) and unable to allocate memory due to large config and that results in memory allocation failure.
21.3R3-S2 - List of Known issues
PR Number
Synopsis
Category: VC Infrastructure
1669241
On JUNOS (EX4600, EX4650, QFX5k VC) platforms, line card might be disconnected from VC post master RE reboot
Product-Group=junos
On JUNOS EX4600, EX4650, QFX5k VC platforms, when master RE is rebooted, the line card might be disconnected from Virtual Chassis (VC). Packet Forwarding Engine (PFE) planned restart may be seen on the new backup due to which line card leaves and rejoins the VC automatically.
PR Number
Synopsis
Category: PRs for Subscriber Management Statistics daemon & libraries
1676049
Minor memory leak in 'bbe-statsd' daemon may be seen when subscriber-management is enabled on MX platforms
Product-Group=junos
On MX platforms, a minor memory leak may be seen over time for transient subscriber sessions which last for around 30 seconds or less. The issue is reproducible consistently and may result in 'bbe-statsd' daemon crash over time.
PR Number
Synopsis
Category: Bi Directional Forwarding Detection
1678016
Traffic drops due to the generation of the FPC core, which makes the system unstable.
Product-Group=junos
All Junos (other than MX) configured with sBFD responder with the following command: "set protocols bfd sbfd local-discriminator <>" which triggers FPC core and leads to drops traffic.
PR Number
Synopsis
Category: Border Gateway Protocol
1677935
Inter-domain forwarding connectivity will be broken between different lo0s in the option-C network causing problems for the MPLS transit-route
Product-Group=junos
On all Junos and Evolved platforms, having BGP Labeled-Unicast (BGP-LU) and non-BGP route for same prefix/lo0 (loopback interface) and readvertising non-BGP active route for this prefix in BGP-LU, cause problems for MPLS transit-route.
PR Number
Synopsis
Category: functionality related to Broadband Remote Access Server
1669284
Errors are seen when the accounting server source address is IPv6
Product-Group=junos
On all Junos platforms having a profile assigned to the RI (Routing Instance) and using a source IPv6 (Internet Protocol version6) address for the radius server, errors might be observed and the accounting services might not work in an expected manner.
PR Number
Synopsis
Category: DNX L2 related features
1662686
After activating EVPN-ETREE service on ACX5448 pfe may crash
Product-Group=junos
On ACX5448 platform after add some EVPN-ETREE services/interfaces the riofeb (pfe) process may crash and 'dnx_rt_vpls_rebake_flood_route' and 'dnx_nh_composite_handle_flood_nh_change' logs will be seen. "show vmhost crash" will show riofeb coredumps.
1678374
ACX710 : "rpdd:pipe is unblocked" / "rpdd: pipe is now flow blocked" are logged during EVPN RI activate/deactivate
Product-Group=junos
ACX710 is a low resource switch. The syslog messages reported in description can be expected when there is a congestion in communication pipe between 2 processes. The messages sent through this IPC will be delayed a little bit till the IPC pipe becomes unblocked or decongested.
PR Number
Synopsis
Category: Layer 3 forwarding, both v4+v6
1634033
[isis] [ISIS] acx5448 : :: JDI_FT_REGRESSION:PROTOCOLS:ACX5448-D/M:Traffic Loss Duration is more than 60 ms for the flow after link down event
Product-Group=junos
Convergance Time can be more than 60secs for ISIS TILFA Node protection testing
PR Number
Synopsis
Category: FIB telemetry, fibtd, libocaft repositories
1662999
network-instance name for streaming telemetry to be changed from default to DEFAULT to align with CONFIG stanza
Product-Group=junos
for ONDATRA test case which tested this with different network-instance names - DEFAULT. test is failing. for TEST to pass ,use network-instance names - default.
PR Number
Synopsis
Category: PRs for Lagavulin PFE tracking
1603015
On EX4400 dot1x authentication may not work on EVPN/xlan enabled endpoints.
Product-Group=junos
On EX4400 dot1x authentication may not work on EVPN/xlan enabled endpoints. The issue is due to EAPOL packets received on VxLAN ports are not processed in hostpath.
PR Number
Synopsis
Category: PR for Lagavuling platform
1653499
Additional debug logs may be printed onto device console, when device is booted from a bootable USB
Product-Group=junos
When EX4400 device is booted from a USB image with 22.1R1.8 software, additional debug log messages may be printed onto the console of the EX4400 device.
PR Number
Synopsis
Category: Express PFE dhcp
1658287
ZTP: DHCPACK not received at ztp-server after zeroize of the device (client)
Product-Group=junos
ZTP: DHCPACK not received at ztp-server after zeroize of the device (client)
PR Number
Synopsis
Category: SRX4100/SRX4200 Great Wall
1626562
A major alarm DPDK (data plane development kit) Tx stuck issue of SRX4100/4200
Product-Group=junos
On the SRX4100 and SRX4200 platforms, it can detect DPDK (data plane development kit) Tx stuck issue and trigger a major chassis alarm goes which might trigger RG1 failover to the healthy node. A DPDK reset will be triggered only to the stuck port and if the reset resolves the tx stuck issue, the major chassis alarm will go off.
PR Number
Synopsis
Category: Multiprotocol Label Switching
1615001
The RPD crash may happen due to refcount leak in routing table metrics
Product-Group=junos
On all Junos and Junos OS Evolved platforms with BGP-LS configured, addition of routes via TED_LS module might cause refcount leak and could lead to RPD crash on the device.
1673348
CPU utilization of rpd process may reach 100% while reporting LSP states to pccd if the IS-IS update churn is high
Product-Group=junos
On all Junos and Junos Evolved platforms where PCEP (Path Computation Element Protocol) is provisioned, after IS-IS (Intermediate System-Intermediate System) PDU (Protocol Data Unit) flooding, rpd (routing protocol daemon) re-computes LSPs (Label Switched Path) and sends those to the pccd (path computation client daemon) which in turn reports those to PCE (Path Computation Element) for processing. If the update churn is high, this may cause the rpd to reach or get stuck at 100% CPU utilization.
PR Number
Synopsis
Category: Kernel-only Base FreeBSD Infrastructure
1649799
A rare corner case would lead to the restart of the device with a VMCORE crash
Product-Group=junos
On EX3400-48P and EX3400-48T platforms, a rare corner case, would lead to the restart of the device with a VMCORE crash.
PR Number
Synopsis
Category: Express Paradise PFE L3 Features
1663134
IS-IS adjacency is not coming up through the Layer 2 domain
Product-Group=junos
On QFX10008/QFX10002/PTX1000/PTX5000/PTX10000 platforms configured with IS-IS((Intermediate System to Intermediate System) over Layer 2 domain, the IS-IS adjacency is not coming up, in a scenario where Cross-functional Layer 2 switching encapsulation is enabled on a single device, like Vlan-CCC at the ingress interface and Ethernet-CCC at the egress interface.
PR Number
Synopsis
Category: vMX Platform Infrastructure related issue tracking
1662524
In the EVPN-VXLAN scenario, the DHCP packets will get dropped when the DHCP relay agent is configured
Product-Group=junos
On EX92XX series and MX platforms with the EVPN-VXLAN (Ethernet VPN-Virtual Extensible LAN) scenario, the DHCP (Dynamic Host Configuration Protocol) packets from the client get dropped while tunneling to the EVPN-VXLAN. When this happens, the packets will not reach the DHCP server and the host could not get the IP address.
PR Number
Synopsis
Category: PFE L2
1667069
PVLAN IGMP packet is forwarded between Isolated ports and also duplicated to primary vlan port (Promiscous).
Product-Group=junos
When Isolated port receives IGMP packet, it should not be forwarded to other Isolated ports but was forwarded and also duplicated to primary vlan port (Promiscous).
PR Number
Synopsis
Category: All the issues related to PFE MPLS
1579931
QFX5120 - Observed the partial traffic loss after disabling the protected link resulting in delay in convergence for link-protection for PE1_P link
Product-Group=junos
On a QFX5120, when you disable a protected link. You may see a delay of 200-400 mSec for the system to react to the disable link event.
PR Number
Synopsis
Category: Interfaces related issues in RPDIssues related to interface
1639134
The dynamic tunnel might flap every 15 mins with a non-forwarding route
Product-Group=junos
On all Junos and Junos Evolved platforms, the dynamic tunnel might flap every 15 mins when a non-forwarding route is resolving over the dynamic tunnel. The non-forward route resolution on a dynamic tunnel route might not be successful. As the route resolution is having impact, traffic drop might be seen in peer nodes.
PR Number
Synopsis
Category: Resource Reservation Protocol
1685182
PTX10008 EVO : When Bypass is used, RSVP PathTear is not encapsulated by MPLS header
Product-Group=junos
When the bypass host route was deprecated through PR 1593959, bypass label info is not correctly set when sending backup PathTear messages if long refresh interval is disabled between the Point of Local Repair (PLR) and the Merge Point (MP).
PR Number
Synopsis
Category: SRX Argon module bugs
1629972
SMS Channel Down alarm on primary node of HA pair after upgrade
Product-Group=junos
After upgrading an SRX HA pair, a chassis alarm for "SMS Channel Down" is triggered and remains present though no cloud connectivity issues detected.
1646661
21.3R2:SRX_RIAD:srx1500,srx4200:SKYATP:IMAP/IMAPS Email permitted counter is not incremented in AAMW email statistics while testing whole email block.
Product-Group=junos
The SKYATP:IMAP/IMAPS Email permitted counter may have incorrect value under certain conditions.
PR Number
Synopsis
Category: platform related PRs on SRX branch platforms
1615494
PR1615494 - t1 interface admin status will be "test" during FPC failover
Product-Group=junos
"t1" interface admin status will be shown as "test" instead of "down" during FPC failover
PR Number
Synopsis
Category: Stout PF fabric (SFB2)
1674309
During the smooth upgrade from SFB1 to SFB2, SFB2 gets detected as "Unknown Fabric Board"
Product-Group=junos
On MX2010 and MX2020 platforms, SFB2 gets detected as "Unknown Fabric Board" during the smooth upgrade from SFB1 to SFB2 causing fabric issues.
PR Number
Synopsis
Category: trinity pfe bridging, learning, stp, oam, irb software
1522896
Egress traffic loss might happen because of PFE MTU feature problem
Product-Group=junos
On MX and EX9200 serial platforms, under Ethernet VPN (EVPN) environment, packets routed using IRB interface could not be fragmented due to media maximum transmission unit (MTU) problem.
PR Number
Synopsis
Category: trinity pfe multicast software
1655363
Multicast packet drop causes pixelization
Product-Group=junos
On all MPC1/MPC2NG/MPC3NG/MPC7/MPC8/MPC9/MPC10/MPC11/LC9600/MX304 line cards, the multicast traffic drop could be observed. Only a few mcast packets get dropped, hence pixelization is seen on the receiver. The packet for the static receiver on the router passes through the policer on the loopback filter. Only those packets that pass through are looked into by the firewall loopback filter.
PR Number
Synopsis
Category: QFX Ultimat RCB issues
1635812
chassisd might crash if chassis disk-partition is configured
Product-Group=junos
On QFX10008 and QFX10016 platforms, chassisd might crash if the disk-partition monitor is configured.
PR Number
Synopsis
Category: PRs related to vmhost platforms
1605915
Harmless error message might be seen when downgrading from 21.2/21.3/21.4 to 21.1 or older image on VMHost platform
Product-Group=junosvae
When performing downgrade from 21.2/21.3/21.4 to 21.1 or older image on VMHost platform, below harmless error messages might be seen during "request vmhost software add" command execution. mkdir: cannot create directory '/tmp/partdisk-V6pHko/jrootfs/junos': File exists. mkdir: cannot create directory '/tmp/partdisk-V6pHko/jrootfs/vm': File exists. mkdir: cannot create directory '/tmp/partdisk-V6pHko/jrootfs/spare': File exists.
PR Number
Synopsis
Category: Virtual Private Networks - rpd
1661542
Traffic drop will be seen when the local VRF routes are advertised to the L3VPN peer configured with forwarding-context
Product-Group=junos
On all Junos and Junos OS Evolved platforms, traffic drop will be seen when the local VRF routes (with vrf-table-label knob enabled) are advertised to the L3VPN peer configured with forwarding-context.
Modification History
First publication 2022-09-21
21.3R3-S2: Software Release Notification for JUNOS Software