Alert Type
SRN - Software Release Notification
Risk
Risk Description
Low/Notification
Software Release Notification
Impact
Impact Description
Low/Notification
Software Release Notification
Product Affected
ACX EX MX NFX PTX QFX SRX vSRX
Alert Description
Alert Description
Junos Software Service Release version 21.4R3-S1 is now available for download from the Junos software download site
Download Junos Software Service Release:
Go to
Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select
Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as need and follow the prompts
Solution
Junos Software service Release version 21.4R3-S1 is now available.
21.4R3-S1 - List of Fixed issues
PR Number
Synopsis
Category: EX4300 Platform
1635689
On EX4300 platforms, continuous MACsec interfaces flaps over an extended period of time
Product-Group=junosvae
On EX4300, MACsec enabled interfaces flaps continuously over an extended period of time(~24 hours) may result in PFE core and IFDs going down.
PR Number
Synopsis
Category: EX2300/3400 PFE
1678430
AE interface will receive unknown unicast traffic on FPC3 reboot of a VC
Product-Group=junos
On VC (Virtual Chassis) supporting EX and QFX platforms, having VC of 4 or more nodes, with an AE (Aggregated Ethernet) interface connected to other VC members, if FPC3 (Flexible PIC Concentrator) of VC is rebooted, unknown unicast traffic will be received on the AE interface.
PR Number
Synopsis
Category: QFX PFE CoS
1688455
The FPC crash would be observed when the same CoS configuration is applied with wildcard for all the physical interfaces and AE
Product-Group=junos
On all Junos platforms, in a scaled scenario when some of the ge/xe/et interfaces are members of Aggregated Ethernet (AE) and the Class of Service (CoS) forwarding-class-set configuration is applied with a wildcard for all the physical interfaces and AE, it would trigger a Flexible PIC Concentrators (FPC) crash which leads to traffic loss.
PR Number
Synopsis
Category: COS for australia platform
1596172
"show interfaces queue < interface>" command output not correctly displaying bps values for throughput higher than 4.25Gbps
Product-Group=junos
"show interfaces queue < interface>" command output not correctly displaying bps values for throughput higher than 4.25Gbps. This behaviour is only present for throughput higher than 4.25Gbps per interface output queue.
PR Number
Synopsis
Category: A20/A40 IOC card
1685927
Specific SRX platforms are not passing the traffic when L2 transparent mode is configured
Product-Group=junos
Specific SRX platforms (SRX5400/SRX5600/SRX5800/SRX4600) are not passing the traffic when STP (Spanning Tree Protocol) packets are received in L2 transparent mode. PPE goes into a loop and cause a traffic impact.
PR Number
Synopsis
Category: Bi Directional Forwarding Detection (BFD)
1678016
Traffic drops due to the generation of the FPC core, which makes the system unstable.
Product-Group=junos
All Junos (other than MX) configured with sBFD responder with the following command: "set protocols bfd sbfd local-discriminator <>" which triggers FPC core and leads to drops traffic.
PR Number
Synopsis
Category: Border Gateway Protocol
1660456
Incorrect inactive routes are being propagated to neighbors with add-path
Product-Group=junos
On all Junos and Junos Evolved platforms that support add-path which is used to advertise inactive external BGP routes from the VRF table, changes to that route may not be propagated. To avoid the issue please use advertise-external knob instead of add-path to advertise not best eBGP routes internally.
1669615
RPD crash might be observed due to multiple sequences of flap events
Product-Group=junos
On all Junos and Junos Evolved platforms, when BGP update-threading is enabled and executed a certain sequence of flap events like flapping ISIS adjacencies, LDP, iBGP peers, clearing ARP table, interface flap for an hour by turning OFF and ON laser which triggers the rpd crash. It is a rare case.
1670673
Source/Destination AS fields shows up as 0 in the flow record
Product-Group=junos
On all Junos and Junos Evolved platforms, Inline Jflow may export flow data incorrectly setting source/destination AS to 0 or setting unrelated AS number, when a change happens to the BGP route in a routing table. A change need not make route selection happen among BGP routes. Increasing and decreasing the number of hidden routes, which does not affect to existing active route, could cause wrong AS information in flow data.
PR Number
Synopsis
Category: ACX BFD specific issues
1666746
Inline BFDv6 Sessions may go Down and stay in that state on ACX5448 and ACX710 Platforms
Product-Group=junos
On ACX5448 & ACX710 platforms, Inline IPv6 BFD (Bidirectional Forwarding Detection) sessions may go into DOWN state because the hardware stops processing the BFD packets
PR Number
Synopsis
Category: CoS support on DNX
1603622
RED-dropped packets might be observed if hierarchical-scheduler is configured on ACX5448 platforms
Product-Group=junos
On ACX5448 platforms, if hierarchical-scheduler is configured for an interface, during interface flaps or configuration changes, some of PFE buffers might become out of sync, which might cause packets drops even without congestion.
PR Number
Synopsis
Category: ACX IRB specific issues
1683770
On the ACX710 router, the IEEE 802.1p priority and DEI values in the locally generated VLAN-based IP packets might be changed when sourced from the IRB interface.
Product-Group=junos
On ACX710, when locally generated VLAN-based IP packets (e.g. ping packet) are sourced from IRB interface, the Priority and DEI bits may be changed in PFE.
PR Number
Synopsis
Category: VPWS, L2 CKT, EVPN-VPWS
1667724
Shutting the CE interface and bringing back up causes traffic (going towards the core) drop
Product-Group=junos
On junos ACX platform, shutting the CE interface and bringing back up causes traffic (going towards the core) to drop.
1683900
ACX5448:ACX710 L2Circuit traffic drop with control-word enabled or control-word config change.
Product-Group=junos
ACX5448:ACX710 L2Circuit traffic drop with control-word enabled or control-word config change.
PR Number
Synopsis
Category: FIB telemetry, fibtd, libocaft repositories
1662999
network-instance name for streaming telemetry to be changed from default to DEFAULT to align with CONFIG stanza
Product-Group=junos
for ONDATRA test case which tested this with different network-instance names - DEFAULT. test is failing. for TEST to pass ,use network-instance names - default.
PR Number
Synopsis
Category: management ethernet related issues - mgmt-ethd daemon
1648371
IPv6 master-only IP address does not move to the new master RE after a switchover.
Product-Group=junos
IPv6 master-only IP address does not move to the new master RE after a switchover. As a workaround please deactivate and activate the master-only IPv6 address on the new master.
PR Number
Synopsis
Category: EVPN control plane issues
1680421
EVPN MPLS traffic drop can be observed in a multi-vendor PE CE setup with single-active LAG
Product-Group=junos
On all Junos platforms running EVPN (Ethernet Virtual Private Network) MPLS (Multi-Protocol Labeled Switching) and a single active LAG (Link Aggregation), the traffic can get forwarded to the NDF (Non-Designed Forwarder) router which can lead to a traffic drop. This issue is seen in multi-vendor PE (Provider Edge) CE (Customer Edge) setup when there is a DF switchover i.e DF (Designated Forwarder) role changes and the backup router starts advertising the EVPN type 2 route, now there is another switchover and the old DF again becomes the DF and advertises EVPN type 1 route but the NDF does not withdraw its route consequently the traffic gets forwarded to the NDF.
PR Number
Synopsis
Category: EVPN Layer-2 Forwarding
1649234
The kernel crash would be observed in an EVPN multi-homed scenario
Product-Group=junos
On QFX10002/QFX10008/QFX10016 (only QFX10K) platforms, when Assisted Replication (AR) feature as Replicator role is used in an Ethernet VPN (EVPN) multi-homed scenario, there would be out-of-bound memory access issue observed which could result in the kernel crash leading to the service impact.
1665130
CRB EVPN MPLS is not working with control-word enabled
Product-Group=junos
On MX platforms, ARP (Address Resolution Protocol) failure or traffic drops are seen in CRB (Centrally-Routed Bridging) EVPN-MPLS (Ethernet VPN - Multiprotocol Label Switching) mode when ARP requests with control-word enabled get flooded to the MX device as the remote PE (Provider Edge) does not support the ARP suppression feature and is unable to handle IRB (Integrated routing and bridging). The ARP reply from the MX device is not going out with the control word causing traffic to be dropped as the packet is malformed.
PR Number
Synopsis
Category: Emerald RE, Platform Infra, Drivers
1656611
The show chassis led output does not match the LED behaviour
Product-Group=junos
The output of "show chassis led" does not match the LED behavior. The admin down/up status in ADM mode does not work properly.
PR Number
Synopsis
Category: Express PFE L2 fwding Features
1664656
The DHCP offer packets will not be sent to the clients when the DHCP relay agent is configured over Type-5 EVPN
Product-Group=junos
On QFX10002-60c platform, the DHCP (Dynamic Host Configuration Protocol) offer messages from the DHCP server will be dropped when the device acts as a DHCP relay agent over a Type-5 tunnel. Due to this, the IP address will not be assigned to the requesting client from the DHCP server.
PR Number
Synopsis
Category: Express PFE MPLS Features
1590387
ISIS adjacency is not coming up through TCC l2circuit
Product-Group=junos
On ACX/PTX/QFX platforms(PTX10002/10003/10008/10016/QFX10002/10003/10008/10016/ACX6360) if protocols l2circuit and channel tcc is enabled for providing layer 2 transaction, ISIS connection through the layer 2 domain might get failed and traffic loss might be seen.
PR Number
Synopsis
Category: Express ASIC interface
1669267
PCS errored blocks count increments on PTX3000/PTX5000 after Junos software upgrade
Product-Group=junos
On PTX platforms, packets drop is seen because of increment in PCS and framing errors on some of the 100GE ports on PIC or its peer devices after firmware migration.
PR Number
Synopsis
Category: Libjtask for RPD tasks, scheduler, timers, memory, and slip
1663050
The rpd core may be seen when there is a synchronization issue
Product-Group=junos
On Junos ACX710 device, the rpd core may be seen. The rpd keeps running and there is no functional impact.
PR Number
Synopsis
Category: ISIS routing protocol
1682778
The rpd process will crash and generate core post graceful restart
Product-Group=junos
The rpd process crash is seen when a graceful rpd restart is initiated and ISIS auto-bandwidth is not configured in the system.
PR Number
Synopsis
Category: jdhcpd daemon
1684521
DHCP packets sent to the client have the Option 82 Suboption length set to 0
Product-Group=junos
In all Junos platforms, if a DHCP packet containing an Option 82 Circuit ID or Remote ID made up of Null ASCII values (0x00000005) is received, the system is incorrectly setting the length of the option to '0' in responses.
PR Number
Synopsis
Category: Adresses ALG issues found in JSF
1677554
SIP 200 OK(INVITE) response packets are dropped leading to SIP Call failure
Product-Group=junos
On SRX and MX platforms with SIP (Session Initiation Protocol) ALG (Application Layer Gateway) configured, SIP call failure is observed due to SIP 200 OK(INVITE) response packets being dropped.
PR Number
Synopsis
Category: Flow Module
1629216
The hardware acceleration flag was not properly updated on RT_FLOW_SESSION_CLOSE logs. Additionally, the values for "Services-offload-sessions" for customers using SPC2's in their SRX5000-Series devices was incorrect.
Product-Group=junos
The hardware acceleration flag was not properly updated on RT_FLOW_SESSION_CLOSE logs. Additionally, the values for "Services-offload-sessions" for customers using SPC2's in their SRX5000-Series devices was incorrect.
1683334
Packet loss on GRE Tunnel due to improper route look-up for tunnel destination
Product-Group=junos
On SRX platforms, due to improper route look-up for the tunnel destination if the GRE tunnel is configured in a virtual routing-instance for which packet loss is observed.
1688658
The flow sessions traversing the IOC2 card would time out early when Automated Express Path is enabled
Product-Group=junos
On SRX5K series devices with IOC2 line-cards installed, when running JUNOS 21.2R1 or later where Automated Express Path is enabled by default, sessions traversing the IOC2 card would time out early, leading to a traffic loss and unpredictable flow behavior.
PR Number
Synopsis
Category: Layer2 forwarding on EX/NTF/PTX/QFX
1675861
Traffic flow will be affected as interfaces will be removed from VLAN
Product-Group=junos
On all Junos and Junos-Evolved platforms, when both vlan name (vlan name having vlan-id-list under "edit vlans" hierarchy) and vlan-id-list having overlapping vlan IDs are added to the interface, traffic will be affected when the vlan name is deleted from the interface.
PR Number
Synopsis
Category: Label Distribution Protocol
1671187
LDP Traffic will be blackholed when the L-ISIS/L-OSPF route changes due to interface level configuration
Product-Group=junos
On all Junos and Junos Evolved platforms running Segment Routing (SR), with "set protocols ldp sr-mapping-client" configured, and when interface level configuration changes are done leading to Labeled-ISIS /Labeled-OSPF route change, Labeled Distribution Protocol (LDP) traffic will be blackholed.
PR Number
Synopsis
Category: Issues related to Junos licensing infrastructure
1684842
Licenses on the device might become invalid when the device is upgraded from a legacy licensing-based release to an Agile licensing-based release
Product-Group=junos
PR Number
Synopsis
Category: SW PRs for MPC10E Fabric
1676777
Traffic drop can be seen on MX platforms with MPC10E-10C line card
Product-Group=junos
On MX platforms with MPC10E-10C line card, with line rate traffic, continuous traffic drop can be seen when fabric mode is changed from increased bandwidth to redundant.
PR Number
Synopsis
Category: Multiprotocol Label Switching
1655031
The rpd core is seen due to ted-export and ted database out of sync
Product-Group=junos
On all Junos and Junos OS Evolved platforms, rpd core is hit when the events for deleting prefixes, sids, links and nodes come in out of order which occasionally leads to ted-export and ted database out of sync.
PR Number
Synopsis
Category: MX10K platform
1684728
An interface configured as 1G may flap on a port with the mixed speeds of 1G and 10G after a PIC restart
Product-Group=junos
On MX10008, MX10004, and MX10016 platforms with LC2101, when the channelized interfaces of a port are configured with mixed port speeds of 1G and 10G, after a Physical Interface Card (PIC) reboot the 1G channelized interface will keep flapping. Or, it may also remain down. This will impact all the services running through the 1G channelized interface.
PR Number
Synopsis
Category: Category for tracking Olympus-MX issues
1671649
Traffic loss seen due to SPC3's packets getting stuck
Product-Group=junos
On Junos MX960, MX480 platforms, Flowd restart or PIC offline/online( Physical Interface Cards) causes SPC3's sending of packets to get stuck.
PR Number
Synopsis
Category: FreeBSD Kernel Infrastructure
1681783
On Ex4400 upgrade failure happens when upgrading through a USB drive.
Product-Group=junos
On EX4400 upgrade failure happens when upgrading through a USB drive.
PR Number
Synopsis
Category: Kernel MPLS / Tag / P2MP Infrastructure
1681892
The RE crashes when MPLS next-hop is created and deleted frequently
Product-Group=junos
On all Junos platforms, when the system is up for a very long time, tag stats counters increase and cross the 32-bit capacity when MPLS next-hop is created/deleted frequently, resulting in RE (routing engine) crash.
PR Number
Synopsis
Category: OSPF routing protocol
1634162
OSPF adjacency may take longer to converge when the neighbor restarts non-gracefully
Product-Group=junos
On possibly a different vendor device or a Junos device running Junos OS Release 15.1 or later, when an OSPF neighbor is restarted non-gracefully, there might be a delay in convergence. An eventual traffic loss might appear as the Junos device marks the immediately originated LSA from the restarting neighbor as stale and waits for the next Type-1 LSA to arrive.
PR Number
Synopsis
Category: Express Chip L3 software
1652372
The jvision sensors might not get reset after routing is restarted resulting in verification failure
Product-Group=junos
Fetching SR JVision sensors for AE IL per member link stats will not reset after doing the restart routing.
PR Number
Synopsis
Category: Path computation client daemon
1678874
The rpd process crashes when a delegated LSP with IPv6 install prefix is configured
Product-Group=junos
On all Junos and Junos Evolved platforms, when a LSP (Label Switched Path) is configured with IPv6 install prefix and the management of the LSP is delegated to a PCE (Path Computational Element) controller, rpd process crashes.
PR Number
Synopsis
Category: PPPoE functional plugin for bbe-smgd
1685070
Multiple bbe-smgd cores might be observed resulting in subscribers being lost or failing to login in the Enhanced subscriber scenario
Product-Group=junos
On MX platforms, multiple bbe-smgd cores might be observed due to out-of-bound memory access in the Enhanced subscriber scenario when bringing up PPPoE (Point-to-Point Protocol over Ethernet) subscribers and ACI (agent circuit identifier)/ARI (agent remote identifier) are part of the payload.
PR Number
Synopsis
Category: QFX EVPN / VxLAN
1679684
ARP resolution will fail on QFX5120 VC
Product-Group=junos
On QFX5120 Virtual Chassis (VC) with OVSDB (Open vSwitch Database) VxLAN topology, ARP (Address Resolution Protocol) resolution fails if the traffic passes through VCP (Virtual Chassis Port) ports. As a result, ARP packets are dropped.
1687861
ARP resolution to the IRB interface would get fail in the EVPN-VXLAN scenario
Product-Group=junos
On all QFX5k platforms, when Enterprise style (EP) VLAN is configured with IRB (Integrated Routing and Bridging) in EVPN-VXLAN (Ethernet VPN-Virtual Extensible LAN) scenario, the ARP (Address Resolution Protocol) will fail to resolve the MAC address of the IRB interface. When this happens, MAC-IP learn doesn't happen which will result in traffic loss.
PR Number
Synopsis
Category: QFX10008/16 QFX10002 optics related issues.
1677325
Interfaces with QFX-10000-30C and QFX10000-30C-M Line Cards will not work properly
Product-Group=junos
On QFX10K platforms, interfaces with QFX-10000-30C and QFX10000-30C-M Line Cards will not work properly with FEC (Forward Error Configuration) and links connected to them will remain down.
PR Number
Synopsis
Category: QFX5K Timing software
1683308
dcpfe core seen with PTP configuration on Junos platforms supporting boundary clock
Product-Group=junos
On Junos platforms supporting boundary clock, dc-pfe core is seen with Precision Time Protocol (PTP) integrated routing and bridging (IRB) configuration. This is due to a timing issue between the periodic poll and stream addition.
PR Number
Synopsis
Category: Resource Reservation Protocol
1685182
PTX10008 EVO : When Bypass is used, RSVP PathTear is not encapsulated by MPLS header
Product-Group=junos
When the bypass host route was deprecated through PR 1593959, bypass label info is not correctly set when sending backup PathTear messages if long refresh interval is disabled between the Point of Local Repair (PLR) and the Merge Point (MP).
PR Number
Synopsis
Category: SRX Argon module
1629972
SMS Channel Down alarm on primary node of HA pair after upgrade
Product-Group=junos
After upgrading an SRX HA pair, a chassis alarm for "SMS Channel Down" is triggered and remains present though no cloud connectivity issues detected.
PR Number
Synopsis
Category: SRX branch platforms
1594014
During reboot, "warning: requires 'idp-sig' license" can be seen on the screen even when the device has valid license
Product-Group=junos
If a device is rebooted manually or reboots for any other reason, The following messages can be seen on the boot up screen even when the device has valid license and proper configuration to use the features like IDP/UTM
PR Number
Synopsis
Category: MPC7/8/9 Interface Issues
1660154
Some of ports on MX platforms with MPC7E-10G do not come up with 1G speed
Product-Group=junos
On MX platforms with MPC7E-10G, random interfaces with 1G speed fail to come up after PIC or FPC restart.
PR Number
Synopsis
Category: MX10003/MX204 MPC defects tracking
1659087
Speed change from 10G to 1G on MX causes all other lanes to flap
Product-Group=junos
LC2101 on MX10k8 and LC2103 on MX10003 do not support mixed optical and copper mode on line side of PHY, due to which when 1G mode is configured, 10G lanes go down.
PR Number
Synopsis
Category: SRX-1RU HA SW defects
1684756
The cluster fabric link will be down post reboot of node or power cycle
Product-Group=junos
On SRX4600 platform, when using a cluster-id of 16 or higher post cluster node reboot, the fabric link will stay monitored down.
PR Number
Synopsis
Category: ZT/YT pfe firewall software
1687862
The FPC crash is observed with a "flexible-match-mask" condition
Product-Group=junos
On MX platforms with specific line cards, the Flexible PIC Concentrator (FPC) crash could be observed while configuring the firewall filter with a "flexible-match-mask" condition. However, If the FPC crash is not triggered, then the filter might not be working as expected.
PR Number
Synopsis
Category: ZT/YTpfe bridging, learning, stp, oam, irb software
1688629
All VPLS/Ethernet L2 traffic destined to VMAC will be flooded across the VPLS instance
Product-Group=junos
An MPC10E/MPC11E at a VPLS (Virtual Private LAN Services) PE (provider edge) with a VPLS routing-instance configured with 'routing-interface irb.x' (Integrated Routing and Bridging) could get a group specific VRRP (Virtual Router Redundancy Protocol) VMAC (Virtual MAC) missed in its hardware MAC forwarding table if irb.x is a VRRP master for the respective VRRP group and it was a VRRP backup earlier with a VRRP master reachable through a VPLS pseudowire bound to some LSI (label-switched interface) IFL. Once that LSI IFL goes down because the pseudowire goes down, the MPC10E/MPC11E at a VRRP master will get a group-specific VRRP VMAC entry missed in its hardware MAC forwarding table.
PR Number
Synopsis
Category: Trio pfe stateless firewall software
1614480
Filter related service will not work when the filter is deleted/re-added frequently for AE interface
Product-Group=junos
On MX platforms, during reboot, the AE ifls are first added, then deleted and again added, this flapping causes corner case where the filter attachment ipc has older AE ifl index on which the filter bind fails. Filter will not be attached to the interface, so any filter related service will not work.
PR Number
Synopsis
Category: Trio pfe bridging, learning, stp, oam, irb software
1670316
Layer 2 packets other than IPv4/IPv6 (e.g. CFM) will get forwarded as out of order via MPC10 and MPC11 in the egress direction
Product-Group=junos
On specific MX devices with MPC10 and MPC11 linecards, Layer 2 packets (i.e. other than IPv4/IPv6, e.g. CFM), may get forwarded as out of order in the egress direction. The issue is not seen for IPv4/IPv6/MPLS Encapsulated IPv4/MPLS Encapsulated IPv6 traffic/MPLS Encapsulated Ethernet+IP traffic.
1677631
DHCP bindings will fail for the client connected on an LT interface when DHCP snooping is enabled
Product-Group=junos
On all Junos and Junos Evolved platforms, Dynamic Host Configuration Protocol (DHCP) bindings will fail for the clients connected on an LT(Logical Tunnel) interface when DHCP snooping is enabled. This issue is not seen when DHCP snooping is disabled or when clients and server are on other interfaces.
PR Number
Synopsis
Category: Junos Automation, Commit/Op/Event and SLAX
1656436
A large configuration might not get committed at boot
Product-Group=junos
On all Junos and Junos Evolved, the mgd process might fail to commit a scaled configuration (~350K set statement) during boot due to insufficient memory.
PR Number
Synopsis
Category: Issues related to Logging/Tracing, errmsg, eventd infrastruc
1661323
High logging rate may cause 'eventd' to increase RE CPU utilization
Product-Group=junos
On Junos and Junos Evolved platforms, if a process creates an unusually high number of logs, 'eventd' may end up consuming more resources which may result in RE (Routing-Engine) CPU (Central Processing Unit) spike. This may happen when Telemetry is not configured but due to the bug, the logs are processed by 'eventd' and 'drend'(Dynamic Rendering Daemon).
PR Number
Synopsis
Category: Issues related to all UI tools (mgd-bsd/cli-bsd, XML and DMI
1681656
At start of every hour of the device's uptime, the output of "show system uptime | display xml" operational command might show incorrect value of the uptime calculated in seconds.
Product-Group=junos
At start of every hour of the device's uptime, the output of "show system uptime | display xml" operational command might show incorrect value of the uptime calculated in seconds.
PR Number
Synopsis
Category: VMHOST platforms software
1681532
The PFE process crashes from 21.4R1 version onwards on VMhost platforms
Product-Group=junos
On VM host platforms like ACX54888, PTX1k, PTK10k, MX204, QFX, EX, and Summit 1RU with LTS19 kernel (21.4R1 onwards) where the PFE (Packet Forwarding Engine) runs as a process on the host system, the PFE could crash.
PR Number
Synopsis
Category: Xellent Platform issues
1678992
Traffic drop will be observed if an IP packet with TTL=1 is routed over VXLAN Tunnel
Product-Group=junos
On the QFX10002-60C platform, in EVPN-VXLAN (Ethernet VPN-Virtual Extensible LAN) scenario, an IP packet with TTL=1 to route over to the VXLAN tunnel causes a traffic drop.
PR Number
Synopsis
Category: Unified Services Framework
1664517
SPC3: Receive [Rx] queue of direct memory access might be stuck which may cause issues in packet processing
Product-Group=junos
SPC3:Receive [Rx] queue of direct memory access might be stuck which may cause issues in packet processing
21.4R3-S1 - List of Known issues
PR Number
Synopsis
Category: NFX Series Platform Software
1674872
VNF's Getting DHCP Address from virbr0 with Default Route
Product-Group=junosvae
VNF with DHCP configured on virbr0 is getting a default route and it should not
PR Number
Synopsis
Category: 5G CUPS - RMPS subsystem
1662691
some packages name missing which is RMPSD and MOBILED in show version detail command output
Product-Group=junos
The version details for certain daemons will appear in the command output after the device has been rebooted after the completion of the USB installation of Junos.
PR Number
Synopsis
Category: S/W Diags support for ACX series SKUs.
1513553
ACX710 with the console cable plugged in may find that the system boot is interrupted
Product-Group=junos
For ACX710, if the console cable is plugged in and the terminal connection is active and sending characters to the interface, the system boot may be interrupted and the ACX710 boot will be stalled at the uboot# prompt.
PR Number
Synopsis
Category: ACX Services feature
1633395
Delegated BFD sessions configured on routing-instance may fail to come up
Product-Group=junos
On ACX5448 and ACX710 platforms, all types of delegated BFD sessions configured on routing-instance other than the default routing-instance might not come up.
PR Number
Synopsis
Category: BBE Autoconfigured DVLAN related issues
1680453
The process bbe-smgd on the router would stop processing new PPPoE subscribers session
Product-Group=junos
On all Junos platforms configured with subscriber-management, the process bbe-smgd will stop processing new PPPoE (Point-to-Point Protocol over Ethernet) connections due to a memory leak in the control packet pool of the PPPoE plugin.
PR Number
Synopsis
Category: Border Gateway Protocol
1673160
Vrfs with color routes which needs resolution can trigger a crash in rpd when bgp peers are going down
Product-Group=junos
Vrfs with color routes which needs resolution can trigger a crash in rpd when the last bgp peers are going down. The routes with resolution does not, as they should, lock the resolution table and therefore anyone who unlocks the tree last can case the crash to happen
PR Number
Synopsis
Category: Express Broadway PFE L3
1680757
In distributed mode, BFD sessions will remain down in the EVPN-VxLAN scenario
Product-Group=junos
On QFX 10008 and QFX10016, in a distributed mode Bidirectional Forwarding Detection(BFD) session might remain down if the anchor FPC and the FPC where BFD packets are received over Virtual Tunnel Endpoint (VTEP) are different.
PR Number
Synopsis
Category: Express BT PFE L3 Features
1657659
Junos OS Evolved: PTX Series: Multiple FPCs become unreachable due to continuous polling of specific SNMP OID (CVE-2022-22211)
Product-Group=junos
A limitless resource allocation vulnerability in FPC resources of Juniper Networks Junos OS Evolved on PTX Series allows an unprivileged attacker to cause Denial of Service (DoS). Please refer to https://kb.juniper.net/
JSA69916
[juniper.net]
for more information.
PR Number
Synopsis
Category: PRs related to DS3/E3 mics
1688315
A kernel crash can be seen with MIC-3D-8DS3-E3 installed
Product-Group=junos
On Junos MX platforms which support MIC (Modular Interface Card)-3D-8DS3-E3 a kernel crash can be seen when the configuration 'interface-type t3 and framing type e3' is present on the device. There will be an impact on data services when this issue is encountered and to avoid the issue the framing type configuration should be changed to t3.
PR Number
Synopsis
Category: 1G/10G LC Timing software
1645562
PTP does not lock in certain scenario
Product-Group=junos
On Junos platform, PTP does not lock when port speed is not configured under PIC hierarchy or port speed for some additional random ports are configured under the PIC hierarchy or perform PIC deactivate/activate.
PR Number
Synopsis
Category: Device Configuration Daemon
1658016
when moving few child members from one AE bundle to another AE bundle observed error log "UI_CONFIGURATION_ERROR: Process: dcd, path: , statement: , ae12, Micro BFD local address should be configured on ae12 or lo0"
Product-Group=junos
when moving few child members from one AE bundle to another AE bundle observed error log "UI_CONFIGURATION_ERROR: Process: dcd, path: , statement: , ae12, Micro BFD local address should be configured on ae12 or lo0"
PR Number
Synopsis
Category: CoS support on DNX
1664785
[cos] [scheduler] ACX7509 :: s-map programmed on IFD is not correct when both TCP amd TCP-REM is configured together.
Product-Group=junos
When TCP Main and TCP remaining attached together on IFD its observed that Improper Scheduler MAP is getting configured on HQoS IFD for some corner scenarios. This is a sequence issue from CoSD(RE) which not guaranteed at PFE side. And this applicable for all platforms.
PR Number
Synopsis
Category: DNX L2 related features
1678374
ACX710 : "rpdd:pipe is unblocked" / "rpdd: pipe is now flow blocked" are logged during EVPN RI activate/deactivate
Product-Group=junos
ACX710 is a low resource switch. The syslog messages reported in description can be expected when there is a congestion in communication pipe between 2 processes. The messages sent through this IPC will be delayed a little bit till the IPC pipe becomes unblocked or decongested.
1678752
The LLDP packets will not be transmitted over l2circuit on the ACX platform
Product-Group=junos
On ACX710/ACX5448 platforms in the layer2 circuit scenario, after enabling and disabling the LLDP (Link Layer Discovery Protocol) protocol on the port, LLDP packets will not be transmitted on the created l2circuit if LLDP gets activated before the l2circuit. LLDP traffic will be impacted as packets won't reach the neighbor device.
PR Number
Synopsis
Category: Layer 3 forwarding, both v4+v6
1380145
On the ACX5448 router, latency is observed for the host-generated ICMP traffic.
Product-Group=junos
The "ping" command on an ACX device may show variable latency values. This is expected for host-generated ICMP traffic due to the design of the PFE queue polling the packets from ASIC.
1634033
Traffic Loss Duration is more than 60 ms for the flow after link down event
Product-Group=junos
Convergance Time can be more than 60secs for ISIS TILFA Node protection testing
PR Number
Synopsis
Category: Covers Application classification workflows apart from custo
1637181
The srxpfe process might crash while installing IDP sigpack with scaled traffic on SRX platforms
Product-Group=junos
On SRX platforms, while installing IDP(Intrusion Detection and Prevention) sigpack in a loop (installing private IDP sigpacks for particular versions alternatively) srxpfe process might crash.
PR Number
Synopsis
Category: EVPN control plane issues
1659315
EVPN-VXLAN: After RE switchover, a momentary traffic loss may be observed with EVPN VxLAN on EX4400 switches
Product-Group=junos
EVPN-VXLAN: After RE switchover, a momentary traffic loss may be observed with EVPN VxLAN on EX4400 switches
PR Number
Synopsis
Category: EX4400 platform
1691174
The factory default config does not have xe-0/2/0.
Product-Group=junos
On EX4400-24T, it is observed that the factory default configuration does not have interface xe-0/2/0.
PR Number
Synopsis
Category: Express PFE dhcp
1649576
JDI_PLATFORM_PFE_PTX1000: V6 default route not added after successful dhcpv6 binding on PTX1000 router
Product-Group=junos
V6 default route will not get added after successful dhcpv6 client binding on PTX1000 router during ztp
PR Number
Synopsis
Category: Express PFE L3 Multicast
1678723
On QFX10008, pps statistics for multicast packets is not as expected
Product-Group=junos
On QFX10008, Statistics for multicast packets is not as expected as the packets has L2 header stripped during replication in PFE because of which it is not forwarded to the next hop.
PR Number
Synopsis
Category: idp flow creation, deletion,notification, session mgr intfce
1686105
IDP unwanted attacks (false positives) detected on the traffic
Product-Group=junos
On all Junos SRX platforms with 19.4 and 20.1 release, IDP (Intrusion Detection and Prevention) false positive attacks can be exempted from the policy for traffic continuity. The impact is that unexpected signatures 'may' trigger in certain conditions.
PR Number
Synopsis
Category: Libjtask for RPD tasks, scheduler, timers, memory, and slip
1589432
:EX2300:RPD core is seen on EX2300 boxes after rebooting master when master is not in shortest path
Product-Group=junos
In rare circumstances when doing routing-engine switchover, the routing protocol daemon in former active routing-engine (new backup routing-engine) might restart with a coredump while in process of being terminated.
PR Number
Synopsis
Category: Integrated Routing & Bridging (IRB) module
1629345
Inter vlan ipv6 traffic loss for some hosts after configuration remove and restore.
Product-Group=junos
For a topology with VSTP and VRRP configured and IPV6 traffic, if VSTP bridge priority is changed a couple of times (to trigger toggling of root bridge), it is possible that V6 traffic drop is seen on some of the streams.
PR Number
Synopsis
Category: SRX Firewall Authentication
1659115
show fwauth user details is not displaying group information
Product-Group=junos
SRX cli command to show fwauth user details like "show security firewall-authentication users identifier 1" and "show security firewall-authentication users address 10.1.1.1" does not display user's group information.
PR Number
Synopsis
Category: High Availability/NSRP/VRRP
1691071
Chassis cluster IP monitoring on the secondary node failed after system reboot
Product-Group=junos
On SRX platform with chassis cluster enabled, chassis cluster IP monitoring on the secondary node might fail after system reboot
PR Number
Synopsis
Category: all logging related bugs on srx platforms
1687244
unexpected default event-rate value for event mode logging
Product-Group=junos
On SRX platform, when event mode logging is used without event-rate option, the logging rate was unexpectedly set to 100 although the default event rate is 1500
PR Number
Synopsis
Category: Layer2 forwarding on EX/NTF/PTX/QFX
1686523
VPLS traffic stop after adding/changing VPLS routing instance
Product-Group=junos
VPLS mesh group add is failing because L2ALD is keep trying to add mesh group for a deleted routing instance.
PR Number
Synopsis
Category: Label Distribution Protocol
1670334
Traffic loss will be seen in an LDP->BGP-LU stitching scenario
Product-Group=junos
On all QFX platforms, traffic loss can happen when the BGP-LU (Labeled Unicast) routes are exported to LDP (Label Distribution Protocol) to perform LDP->BGP-LU stitching, on a device with directly connected BGP peers.
PR Number
Synopsis
Category: Platform issues specific to MS-MPC (XLP)
1681624
Fabric Plane check/error alarm would be seen due to the burst traffic in MS-MPC line cards
Product-Group=junos
On MX2008 platforms, when the overrun interrupt is set in Multiservices Modular PIC Concentrator (MS-MPC) line cards Fabric Plane check/error alarm would be observed. Latency difference between the SFB2/SFB3 and the MS-MPC cards with burst traffic potentially causes overruns as a result the fabric planes get stuck into the check state. It is a timing issue.
PR Number
Synopsis
Category: For multicast snooping on MX
1636261
Message 'Initialize libjtask-license first! for mcsnoopd' is seen after committing configuration
Product-Group=junos
On all Junos platforms, a harmless message is observed on the terminal output after committing the multicast snooping configuration.
PR Number
Synopsis
Category: OS IPv4/ARP/ICMPv4
1358376
Configuration knob to control icmp.traceroute_l3vpn so source address for ICMP TTL expired message matches CE-facing interface's network
Product-Group=junos
In a Layer 3 VPN topology, traceroute to a remote PE device for a CE-facing network results in an ICMP TTL expired reply with a source address of only one of the many CE-facing networks. In Junos OS Releases 15.1R5, 16.1R3, and 16.2R1 and later releases, there is a kernel sysctl value, icmp.traceroute_l3vpn. Setting this to 1 will change the behavior to select an address-based on the destination specified in the traceroute command. This PR adds the option to the configuration.
PR Number
Synopsis
Category: FreeBSD Kernel Infrastructure
1586481
Software Image Upgrade from versions 21.1 (or earlier) to version 21.2 (or later) requires mandatory knob 'no-validate'
Product-Group=junos
While upgrading the image from 21.2T to 21.3DCB, the no-validate knob is mandatory for the upgrade command to proceed.
PR Number
Synopsis
Category: Used for tracking OVSDB software issues and features
1687847
OVSDB certificate files are not copied from the Master to the Backup
Product-Group=junos
On all Junos devices which support OVSDB (Open vSwitch Database) functionality, when a new backup is added on VC (virtual chassis), the master does not copy the certificate files to the backup. This impacts the OVSDB functionality and affects the traffic.
PR Number
Synopsis
Category: Express Chip L3 software
1621976
BFD session flap might be observed in scaled scenario
Product-Group=junos
On Junos QFX10k platforms with scaled number of BFD (Bidirectional Forwarding Detection) sessions configured, addition of a new BFD session might cause flapping in newly added session and other existing BFD sessions.
1653671
[interface] [interface] qfx10002 :: [ STATS: IFD: ae tagged: R0_RT connected interface traffic-ipv6-output-bytes is not in range ]
Product-Group=junos
On QFX platform, v6 ifl stats are being derived from the underlying ifd stats unlike on PTX where they are hardware assisted. Hence, they are not very reliable and are at best, guesstimate.
PR Number
Synopsis
Category: JRR - VRR running on SRX4200
1691694
A 802.1Q tagged Ethernet traffic with an expected VLAN ID and with a non-zero 802.1P value ingressing a JRR200 VLAN enabled interface is dropped.
Product-Group=junos
A 802.1Q tagged Ethernet traffic with an expected VLAN ID and with a non-zero 802.1P value ingressing a JRR200 VLAN enabled interface is dropped. This problem could happen at a JRR200 system running a 21.1+ JUNOS release.
PR Number
Synopsis
Category: DHCP related Issues
1594748
[DHCP] [DHCP] QFX5110 - FPC gets disconnected with 24K DHCPv6 relay scaling, after the traffic is stopped. pfe_listener_disconnect error messages are seen.
Product-Group=junos
On QFX5110 VC, FPC may gets disconnected with 24K DHCPv6 relay scaling, after the traffic is stopped. "pfe_listener_disconnect" error messages may be seen.
PR Number
Synopsis
Category: QFX L2 PFE
1632565
QFX5110-32Q : Traffic loss seen after renumbering master in VC
Product-Group=junos
QFX5110-32Q : Traffic loss seen after renumbering master in VC
PR Number
Synopsis
Category: QFX EVPN / VxLAN
1663804
Type-5 traffic drops when the device is configured without IRB in the EVPN-VxLAN scenario
Product-Group=junos
On all QFX platforms, Ethernet VPN (EVPN) Type-5 traffic drops are observed when the device is configured only with Type-5 Virtual Routing and Forwarding (VRF) and without an Integrated Routing and Bridging (IRB) interface.
PR Number
Synopsis
Category: QFX10008/16 QFX10002 linecard, serdes and uboot
1688993
On QFX10008/QFX10016 platforms fails to detect flaps even though the remote device connected has observed flaps
Product-Group=junos
On QFX10008/QFX10016 platforms, interface faults(Local/Remote) of very short duration (<30msec) can go undetected. The interface does not go down due to these faults leading to unidirectional link and traffic blackholing.
PR Number
Synopsis
Category: QFX10008/16 QFX10002 Ultimat/Elit platform related issues -
1676740
,The traffic doesn't re-route quickly causing traffic blackholing
Product-Group=junos
On all VMHOST based platforms, traffic blackholing happens because the traffic doesn't re-route quickly as chassisd doesn't recognize an FPC failure from a BAD_VOLTAGE notification.
PR Number
Synopsis
Category: QFX5100 Interface related issues
1665800
Ports with SFP-T 1G plugged in may go to hung state on QFX5100 platforms
Product-Group=junos
When the remote end server/system reboots, QFX5100 platform ports with SFP-T 1G inserted may go into a hung state and remain in that state even after the reboot is complete. This may affect traffic after the remote end system comes online and resumes traffic transmission.
1673036
On QFX5100, CRC/framing errors are seen with 4x10G IR optics (JPN:740-056706)
Product-Group=junos
On QFX5100, CRC/framing errors are seen with 4x10G IR optics (JPN:740-056706)
PR Number
Synopsis
Category: QFX5200/5110/5120/5210 ISSU Infrastructure
1673116
On QFX5200, after NSSU upgrade for a 4 member VC , FPC may toggle resulting in interfaces going offline
Product-Group=junos
On QFX5200, after NSSU upgrade for a 4 member VC , FPC may toggle resulting in interfaces going offline
PR Number
Synopsis
Category: SRX Argon module
1646661
21.3R2:SRX_RIAD:srx1500, srx4200:SKYATP:IMAP/IMAPS Email permitted counter is not incremented in AAMW email statistics while testing whole email block.
Product-Group=junos
The SKYATP:IMAP/IMAPS Email permitted counter may have incorrect value under certain conditions.
PR Number
Synopsis
Category: Remote Access VPN issues on SRX
1674522
VPN tunnel will not be established in exclusive client scenario
Product-Group=junos
On SRX platforms, if NCP(Network Control Protocol) pathfinder client is enabled with tcp-encap mode, VPN(Virtual Private Network) tunnel will not be established.
PR Number
Synopsis
Category: SRX branch platforms
1675853
Netbios traffic (IRB broadcast) is getting dropped post upgrade on the SRX platform
Product-Group=junos
On SRX platforms, NetBIOS (Network Basic Input/Output System) broadcast packets originating from the client do not reach the SRX routing engine, which is required in case "set forwarding-options helpers port 137" is configured to forward NetBIOS to a server.
PR Number
Synopsis
Category: Trio LU, IX, QX, MQ chip drivers, ucode & related SW
1645505
FPC crash might occur during ISSU upgrade
Product-Group=junos
On MX/EX/SRX platforms, FPC crash might be observed during ISSU (In-Service Software Upgrade)upgrade in specific line cards (eg MPC9/8/7).
PR Number
Synopsis
Category: VMHOST platforms software
1646339
The alarm might not be generated for EDAC errors until the FPC is rebooted
Product-Group=junos
On all MX and PTX platforms, EDAC errors are triggered but alarms are not observed until the FPC gets rebooted due to the data corruption in hardware.
PR Number
Synopsis
Category: VSRX platform software
1681042
ARP will not get learned if reth interface is configured with VLAN
Product-Group=junos
On vSRX 3.0 platforms in High availability (HA) cluster environment, ARP (Address Resolution Protocol) will not get learned if VLAN is configured on the reth (redundant Ethernet) interface.
PR Number
Synopsis
Category: usf logging and reporting function related issues
1678453
21.4R3::CGNAT:Some of the syslog flows session closed messages are missing, while closing the sessions for nat64.
Product-Group=junos
There will be drop of syslog packets seen for RT_FLOW: RT_FLOW_SESSION_CREATE_USF logs until this is fixed. This will not impact the functionality.
Modification History
First publication 2022-11-07
21.4R3-S1: Software Release Notification for JUNOS Software