Alert Type

PSN - Product Support Notification
Low/NotificationSoftware Release Notification
Low/NotificationSoftware Release Notification

Product Affected

ACX EX MX NFX PTX QFX SRX vSRX

Alert Description

Junos Software Service Release version 22.2R1-S2 is now available for download from the Junos software download site

Download Junos Software Service Release:

  1. Go to Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts

Solution

Junos Software service Release version 22.2R1-S2 is now available.

22.2R1-S2 - List of Fixed issues

PR NumberSynopsisCategory: MX Platform SW - FRU Management
1676008MPC stuck in present state with log " graceful offline in progress, returning false" flooding
Product-Group=junos		In over temperature situation, there will be a 10s timer before device bring the FPC down . However in some situation due to high temperature, a FPC offline action will be triggered before the 10s timer expires. Then the FPC will stuck in Present/Announce offline state. Cli offline/online it or physical reseat will not be able to recover the issue. When the issue happening, you may observe log message " graceful offline in progress, returning false" flooding: <<< fpc_ok_to_start_generic: [FPC 0] gracefull offline in progress, returning false fpc_ok_to_start_generic: [FPC 0] gracefull offline in progress, returning false <<< Below MPCs are affected by this issue: MPC7/8/9 MPC10 MPC11 LC480 LC2101 LC9600 LC304 LC4800 FPC-P2, FPC-P3
PR NumberSynopsisCategory: mgd, ddl, odl infra issues
1620724On EVO platforms mgd core observed when repetitive private commits performed via netconf.
Product-Group=junos		On EVO platforms mgd core observed when repetitive private commits performed.
PR NumberSynopsisCategory: Emerald RE, Platform Infra, Drivers
1676433On EX4100, management Interface does not work at 100m/10m speeds
Product-Group=junos		Traffic would not go through on management port at link speed 10 and 100M in junos 22.2R1 and 22.2R1-S1 release.
PR NumberSynopsisCategory: Express PFE MPLS Features
1590387ISIS adjacency is not coming up through TCC l2circuit
Product-Group=junos		On ACX/PTX/QFX platforms(PTX10002/10003/10008/10016/QFX10002/10003/10008/10016/ACX6360) if protocols l2circuit and channel tcc is enabled for providing layer 2 transaction, ISIS connection through the layer 2 domain might get failed and traffic loss might be seen.
PR NumberSynopsisCategory: SRX4100/SRX4200 platform software
1650112Packet loss might be seen on SRX4100 and SRX4200 devices from 20.2R2
Product-Group=junosvae		Packet loss might be seen on SRX4100 and SRX4200 devices from 20.2R2
PR NumberSynopsisCategory: Flow Module
1661935In SD-WAN the association between VRF instance and VRF group fails for ISSU from 19.2~21.1 to 22.2R1
Product-Group=junos		On SRX and MX-SPC3 (Services Processing Card) supporting MX platforms in SD-WAN (Software-Defined Wide-Area Network), ISSU (In-Service Software Upgrade) from 19.2~21.1 to 22.2R1 will result in relationship failure of VRF (Virtual Routing and Forwarding) instance and VRF-group.
PR NumberSynopsisCategory: Firewall Policy
1680749SRX stops refreshing the FQDNs used in the security policies and NAT
Product-Group=junos		On all Junos SRX platforms, when using FQDN (fully-qualified domain name) based address book, overlapping with security policy and NAT (Network Address Translation) rules, over the long run SRX device will stop sending DNS (Domain Name System) queries to the DNS server to resolve FQDN mentioned in the address book. A traffic drop will be observed as the latest IP address would not get updated in the policy.
PR NumberSynopsisCategory: Category for tracking Olympus-MX issues
1671649Traffic loss seen due to SPC3's packets getting stuck
Product-Group=junos		On Junos MX960, MX480 platforms, Flowd restart or PIC offline/online( Physical Interface Cards) causes SPC3's sending of packets to get stuck.
PR NumberSynopsisCategory: FreeBSD Kernel Infrastructure
1616315EX4100 and EX4100-F series: The auxliary serial port does not show output
Product-Group=junos		Secondary USB Type C console port in the front panel not displaying proper output.
PR NumberSynopsisCategory: OSPF routing protocol
1645221Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs (CVE-2022-22230)
Product-Group=junos		An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause DoS (Denial of Service). Please refer to https://kb.juniper.net/JSA69884 [juniper.net] for more information.
PR NumberSynopsisCategory: Issues related to control plane security
1655537UEFI BIOS Key synchronization tool - efitools.service failed after optics diagnostics test
Product-Group=junos		The efitools.service failed since the EFI data structure is set to be immutable in the JUNOS WRL version 9.x
PR NumberSynopsisCategory: SRX Argon module
1661766The PFE may crash when a large amount of traffic is submitted to ATP Cloud for inspection
Product-Group=junos		On all SRX platforms when there is a large amount of traffic sent to SkyATP (Sky Advanced Threat Protection) Cloud for inspection, the PFE (Packet Forwarding Engine) may crash and interrupt traffic. A failover will occur if the node belongs to a cluster.
PR NumberSynopsisCategory: ZT/YT pfe l3 forwarding issues
1673341Memory leak will be observed by any change in v4/v6 multicast prefixes
Product-Group=junos		On the MX platform with chipsets MPC10E-10C, MPC10E-15C, MX2K-MPC11E, and MX10K-LC9600 memory leaks will be observed if there is any change in v4/v6 multicast prefixes.
PR NumberSynopsisCategory: Junos Automation, Commit/Op/Event and SLAX
1656436A large configuration might not get committed at boot
Product-Group=junos		On all Junos and Junos Evolved, the mgd process might fail to commit a scaled configuration (~350K set statement) during boot due to insufficient memory.
PR NumberSynopsisCategory: VMHOST platforms software
1675177Issue with eth-lldp-stop.sh after junos upgrade performed in PTX5000(i40e-NVM)
Product-Group=junos		This issue is a rare rescenario. To handle it we are executing lldp disable script again, after all deamons are up.
PR NumberSynopsisCategory: VSRX platform software
1680874vSRX instance in GCP gets stuck in halt state randomly when trying to reboot multiple times
Product-Group=junos		vSRX instance in GCP (Google Cloud Platform) freezes during restart and does not shutdown. This issue is very difficult to hit in production as as it is seen very rarely after several reboots.
 
 

22.2R1-S2 - List of Known issues

PR NumberSynopsisCategory: SRX-1RU System Hardware defects
1658148SRX4600: After ISSU upgrade completed, RG1 nodes priority remains in CS state and fab interfaces are down.
Product-Group=junos		In some of releases including 21.2R3 or 20.4R3, when performing SRX4600 ISSU from these release to a newer release, in some scenarios, e.g. with some traffics and big volume of configurations, after node1 is upgraded and a RG0 failover is performed from node0 to node1, it is observed that RE CPU on both nodes are 0% idle which causes some RE daemons (e.g. jsrpd) scheduling slip on old-version node0, which can sometimes lead to temporarily control-link down, which further causes node0 to go to ineligible state. This further leads to node0's EEPROM being programed a zero (unexpected) value to primary-id before its reboot. Later when node0 boots up, node0's flowd will be stuck reading EEPROM primary-id since it's zero. This leads to node0's control-port brought up by flowd late and finally causes a RG0 split-brain. A cluster reboot may be needed to fix the issue. It is unclear why RE is so busy during ISSU in such setup, while the manual failover of RG0 on same setup never leads to node0 to go to ineligible state. A few suggestions: 1. Please reduce traffics and configurations during ISSU, better to do in maintenance window and add back after ISSU complete. 2. Before ISSU, perform a few times of manual RG0 failover and monitor RE CPU percentage. If RE CPU percentage is very high for a few seconds on both nodes, please consider to reduce traffics. 3. If the ISSU older image is on any releases that are with fix of this PR, this problem will not be seen.
PR NumberSynopsisCategory: NFX Series Platform Software
1664814NFX350 :: : Device is hung after configuring VNF with SRIOV interfaces. Also unable to access JDM
Product-Group=junosvae		Device is hung after configuring VNF with SRIOV interfaces. Also unable to access JDM
PR NumberSynopsisCategory: EVPN control plane issues
1679115EVPN Proxy ARP doesn't work for the static VTEP interface
Product-Group=junos		On all Junos platforms, MAC-IP learning doesn't happen when ARP (Address Resolution Protocol) request comes from static VTEP (Virtual Tunnel End Point).
PR NumberSynopsisCategory: Label Distribution Protocol
1641641JDI-RCT:M/Mx: rpd core @ task_mem_free , ppm_receive ("LDP I/O")
Product-Group=junos		Release note needed
PR NumberSynopsisCategory: Track veHostd, vmm-sdk issues on Mt Rainier RE
1604755LTS19: MX2008: junos vmcore Dump failed. Partition too small.
Product-Group=junos		Correct the partition size so vmcore can be generated, when needed.
PR NumberSynopsisCategory: Protocol Independant Multicast
1675212MX304:: KRT queue shows deferred operation while creating IFL after FPC offline/online event
Product-Group=junos		Dynamic IFL add request is waiting to be processed in KRT queue during that if chassid down event occurs. To handle the chassid down event RPD Infra sends notification to protocol(producer of Dynamic IFL add request) and it is producer jobs to DELETE the dynamic ifls request which were there in the KRT queue. PIM code is not clearing those Dyanamic IFLs ADD request during chassis fpc down event. Hence getting error 'ENOENT -- Item not found' when chassis comes back up.
PR NumberSynopsisCategory: Periodic Packet Management Daemon
1660299JDI-RCT : PPMD crashed at ppm_destroy_distrib_proto_stats_group_entry ( )
Product-Group=junos		When l2cpd (in the context of xSTP) clears the entries that it has programmed on ppmd, ie when you delete xSTP configs from the box, there can be a possibility of ppmd core. If ppmd is in distributed mode then there will be no service impact, else there can be service impact as packet transmission for various protocols will happen via if ppmd is in centralized mode.
PR NumberSynopsisCategory: QFX L3 data-plane/forwarding
1665085dcpfe process cores with traces 0x083c5b8d in nh_composite_install, 0x083c9e5a in nh_composite_add, 0x083d0636 in nh_composite_topo_child_change, 0x083d2242 in nh_composite_change_platform
Product-Group=junos		"dcpfe" process may generate core files with nh_composite_install( ) routine.
PR NumberSynopsisCategory: RPD route tables, resolver, routing instances, static routes
1686756MX304: Rpd crashed after configuring bgp rib-sharding and update-threading
Product-Group=junos		When below configuration done on MFT config, rpd will occupy 100% cpu and crashed set system processes routing bgp rib-sharding set system processes routing bgp update-threading
PR NumberSynopsisCategory: SRX Argon module
1646661SRX_RIAD: srx1500,srx4200: SKYATP: IMAP/IMAPS Email permitted counter is not incremented in AAMW email statistics while testing whole email block.
Product-Group=junos		The SKYATP:IMAP/IMAPS Email permitted counter may have incorrect value under certain conditions.
PR NumberSynopsisCategory: SRX branch platforms
1675853Netbios traffic (IRB broadcast) is getting dropped post upgrade on the SRX platform
Product-Group=junos		On SRX platforms, NetBIOS (Network Basic Input/Output System) broadcast packets originating from the client do not reach the SRX routing engine, which is required in case "set forwarding-options helpers port 137" is configured to forward NetBIOS to a server.
PR NumberSynopsisCategory: Issues related to broadband edge apps (PPP, DHCP) on Trio ch
1666943MX240:Verify VRRP stats is failed after Deactivate the Access interface
Product-Group=junos		MX240:Verify VRRP stats is failed after Deactivate the Access interface

 

Modification History

First publication 2022-10-31