Alert Type

PSN - Product Support Notification
Low/NotificationSoftware Release Notification
Low/NotificationSoftware Release Notification

Product Affected

ACX PTX QFX Junos Evolved Software

Alert Description

Junos Software Service Release version 21.3R3-S2-EVO is now available for download from the Junos software download site

Download Junos Software Service Release:

  1. Go to Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts

Solution

Junos Software service Release version 21.3R3-S2-EVO is now available.

21.3R3-S2-EVO - List of Fixed issues

PR NumberSynopsisCategory: Distributor related issues
1658426Routes in RIB and FIB table may go out of sync on all Junos Evolved platforms and causes a traffic impact
Product-Group=evo		On all Junos evolved platforms, routes in RIB (Routing Information Base) and FIB (Forwarding Information Base) are not in sync when it is running over long period of the time (200+ days) with a constant route churn. It causes a traffic impact due to stale entries.
PR NumberSynopsisCategory: OSPF routing protocol
1645221Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs (CVE-2022-22230)
Product-Group=evo		In all Junos and Junos Evolved platforms,An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause DoS (Denial of Service). Please refer to https://kb.juniper.net/JSA69884 [juniper.net] for more information.
 

21.3R3-S2-EVO - List of Known issues

PR NumberSynopsisCategory: EVO Netstack FIB Service Daemon
1661210Traffic drop might be seen due to slow TCP reestablishment after a topology change
Product-Group=evo		On all Junos Evolved platforms, a topology change that affects a Transmission Control Protocol (TCP) connection, the peer might take time to realize the connection is terminated, and TCP reestablishment might be slow. This might affect the TCP related (Ex: LDP/BGP) protocols traffic.
PR NumberSynopsisCategory: EVO Netstack Juniper Tunnel Driver Module
1654140Configuring family MTU explicitly on an interface may cause host traffic to drop
Product-Group=evo		If a user configures the "family inet", "family inet6", or "family mpls" MTU values on an interface and the resulting MPLS MTU is greater than inet MTU, then MPLS host traffic (i.e., being generated by the RE) sent over an interface with problematic protocol MTU values may be dropped.
PR NumberSynopsisCategory: EVO Socket replication
1671458EVO NSR: Do not send unreplicate message to backup during switchover
Product-Group=evo		During swo, if unreplicate message reaches backup first before backup recovery on the connection is complete then it can lead to leaking the connection on the backup as well as recover does not happen on it. On subsequent switchover such connection may flap. The fix is highly recommended to be present in the image.
PR NumberSynopsisCategory: Category for QFX5K EVO Platform Software PRs related to Chas
1616209Unified led scheme for QFX5220/QFX5130
Product-Group=evo		Port LED behavior in QFX5220/QFX5130 is changed to unified led scheme. One caveat is that there is no red led color support and hence for xcvr fault port LED will be OFF and when beacon is enabled in fault state, port LED is Green blinking. There are two caveats in led behavior, 1. When interface is disabled, led is off instead of amber lit. 2. When interface is channelized and partially up, earlier LED was blinking green. Now it was steady amber.
PR NumberSynopsisCategory: Authentication, Authorization, Accounting, PAM (RADIUS/tacplus)
1662172The CPU utilization might increase when a user login and logout to the device continuously
Product-Group=evo		When multiple users log in and log out using SSH public-private key authentication to the device every few seconds, then the CPU utilization might increase on all Junos and Junos OS Evolved platforms.
PR NumberSynopsisCategory: Issues related to DAX APIs
1669637Periodic rebalancing of subscribers over AE interface might not work
Product-Group=evo		On all Junos and Junos Evolved platforms with scaled PPPoE (Point-to-Point Protocol over Ethernet) subscribers over static vlan-demux-interfaces over AE (Aggregated Ethernet) interface, if the child member links are flapped, periodic rebalancing of subscribers over AE interface might not happen and might lead to congestion on a particular link.

 

Modification History

First publication 2022-10-13