Alert Type
SRN - Software Release Notification
Risk
Risk Description
Low/Notification
Software Release Notification
Impact
Impact Description
Low/Notification
Software Release Notification
Product Affected
ACX EX MX NFX PTX QFX SRX vSRX
Alert Description
Junos Software Service Release version 20.3R3-S6 is now available for download from the Junos software download site
Download Junos Software Service Release:
Go to
Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select
Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as needed and follow the prompts
NOTE: This is the last Service Release (SR) for Junos Software version 20.3R3
Solution
Junos Software service Release version 20.3R3-S6 is now available.
20.3R3-S6 - List of Fixed issues
PR Number
Synopsis
Category: EX2300/3400 PFE
1678430
AE interface will receive unknown unicast traffic on FPC3 reboot of a VC
Product-Group=junos
On VC (Virtual Chassis) supporting EX and QFX platforms, having VC of 4 or more nodes, with an AE (Aggregated Ethernet) interface connected to other VC members, if FPC3 (Flexible PIC Concentrator) of VC is rebooted, unknown unicast traffic will be received on the AE interface.
PR Number
Synopsis
Category: SPC3 HW and SW Issues
1692611
SRX cluster may fail in a rare scenario when node status changes to disabled state without going through the ineligible state
Product-Group=junos
On SRX platforms with chassis cluster configured, the RE(Routing-Engine) & PFE (Packet Forwarding Engine) connection may break, and the cluster may fail when the node status changes from primary/secondary state to disabled state without going through the ineligible state.
PR Number
Synopsis
Category: "agentd" software daemon
1598351
Subscriber management daemons might continuously core and shutdown with RE sensors invalid configured
Product-Group=junos
On all platforms support JTI (Junos telemetry interface), when 'set services analytics export-profile xxx format gpb-sdm' and 'set services analytics export-profile xxx transport tcp' are enabled on RE sensors, subscriber management related daemons (like authd, bbe-smgd, bbe-statsd, jdhcpd, smid) might continuously crash and core dumps are observed.
PR Number
Synopsis
Category: a20a40 specific issue
1642138
Missing boot parameters on Junos SRX5K platforms will result in fabric plane CRC link errors
Product-Group=junos
Fabric plane CRC link errors are detected on Junos SRX5K platforms which can cause an HA switchover and in worst case scenario, throughput issues for user traffic. The hardware error message "Minor CB (Control Board) Fabric Chip Not Online" is displayed and is caused by fabric plane CRC error like "FPC plane CRC link error". The issue happens in HA (High Availability) scenario with SCB4 (Switch Control Board) and IOC3 (Input Output, I/O) cards in use.
PR Number
Synopsis
Category: BBE Autoconfigured DVLAN related issues
1680453
The process bbe-smgd on the router would stop processing new PPPoE subscribers session
Product-Group=junos
On all Junos platforms configured with subscriber-management, the process bbe-smgd will stop processing new PPPoE (Point-to-Point Protocol over Ethernet) connections due to a memory leak in the control packet pool of the PPPoE plugin.
PR Number
Synopsis
Category: BBE Statistics daemon & libraries
1676049
Minor memory leak in 'bbe-statsd' daemon may be seen when subscriber-management is enabled on MX platforms
Product-Group=junos
On MX platforms, a minor memory leak may be seen over time for transient subscriber sessions which last for around 30 seconds or less. The issue is reproducible consistently and may result in 'bbe-statsd' daemon crash over time.
PR Number
Synopsis
Category: Border Gateway Protocol
1635390
BGP routes might be left stale on the router
Product-Group=junos
On all Junos and Junos Evolved platforms, if the BGP peer goes down, and the very last route in the list is marked as a high priority, BGP might assume no more routes to delete, causing routes to be stale.
PR Number
Synopsis
Category: BBE Remote Access Server
1669284
Errors are seen when the accounting server source address is IPv6
Product-Group=junos
On all Junos platforms having a profile assigned to the RI (Routing Instance) and using a source IPv6 (Internet Protocol version6) address for the radius server, errors might be observed and the accounting services might not work in an expected manner.
PR Number
Synopsis
Category: Firewall Filter
1670622
Traffic loss may be observed when changing firewall configuration
Product-Group=junos
On MX platforms supporting MPC7/8/9 line cards, traffic loss may be observed if the firewall configuration changes are made when PFE 0 (Packet Forwarding Engine) is in a disabled state. It is a rare occurrence.
PR Number
Synopsis
Category: ACX VRRP
1666853
Traffic loss is observed when the VRRP is configured over the AE interface
Product-Group=junos
On ACX5448 platforms, the Virtual Router Redundancy Protocol (VRRP) is up from Routing Engine (RE) but the group is not created under the Packet Forwarding Engine (PFE) due to this VRRP virtual IP (VIP) is neither responding to ping nor accept any traffic when the VRRP is configured over Aggregated Ethernet (AE) interface. This results in traffic loss.
PR Number
Synopsis
Category: Manageability for Node Virtualization
1583324
JDM server creation might fail on junos node slicing setup in in-chassis mode
Product-Group=junos
On MX platforms the JDM (Juniper Device Manager) server could not be created in in-chassis mode of junos node slicing, which results in mgd process crash and affects GNF's (Guest Network Function) provisioning.
PR Number
Synopsis
Category: EVPN control plane issues
1680421
EVPN MPLS traffic drop can be observed in a multi-vendor PE CE setup with single-active LAG
Product-Group=junos
On all Junos platforms running EVPN (Ethernet Virtual Private Network) MPLS (Multi-Protocol Labeled Switching) and a single active LAG (Link Aggregation), the traffic can get forwarded to the NDF (Non-Designed Forwarder) router which can lead to a traffic drop. This issue is seen in multi-vendor PE (Provider Edge) CE (Customer Edge) setup when there is a DF switchover i.e DF (Designated Forwarder) role changes and the backup router starts advertising the EVPN type 2 route, now there is another switchover and the old DF again becomes the DF and advertises EVPN type 1 route but the NDF does not withdraw its route consequently the traffic gets forwarded to the NDF.
PR Number
Synopsis
Category: EVPN Layer-2 Forwarding
1649234
The kernel crash would be observed in an EVPN multi-homed scenario
Product-Group=junos
On QFX10002/QFX10008/QFX10016 (only QFX10K) platforms, when Assisted Replication (AR) feature as Replicator role is used in an Ethernet VPN (EVPN) multi-homed scenario, there would be out-of-bound memory access issue observed which could result in the kernel crash leading to the service impact.
PR Number
Synopsis
Category: EX Chassis Interface Handling
1651721
EX9251 :: Reboot reason shows as "0x2000:hypervisor reboot" instead of "0x4000:VJUNOS reboot" when we do Junos reboot
Product-Group=junos
Reboot reason may show incorrect starting LTS19 as it requires a change in VM config file. Workaround is provided for releases where fix is not available.
PR Number
Synopsis
Category: Express PFE including evpn, vxlan
1674116
The BFD packets will drop in an EVPN-VxLAN scenario due to incorrect layer3 offset being set in the host path
Product-Group=junos
On all QFX10000-60C platforms with Ethernet VPN-Virtual Extensible LAN (EVPN-VxLAN) scenario, the Bidirectional Forwarding Detection (BFD) packets are getting classified as packets of different protocols like Virtual Router Redundancy Protocol (VRRP), depending on the value at an incorrect offset which leads to BFD packet drop.
PR Number
Synopsis
Category: Express PFE L2 fwding Features
1659732
On QFX10K Junos platforms configuration of IGMP group range might result in traffic loss
Product-Group=junos
On QFX10K Junos platforms, the configuration of the IGMP group range might result in a specific multicast route getting programmed and this might cause traffic loss.
PR Number
Synopsis
Category: Express ASIC interface
1669267
PCS errored blocks count increments on PTX3000/PTX5000 after Junos software upgrade
Product-Group=junos
On PTX platforms, packets drop is seen because of increment in PCS and framing errors on some of the 100GE ports on PIC or its peer devices after firmware migration.
PR Number
Synopsis
Category: SRX4100/SRX4200 platform software
1650112
Packet loss might be seen on SRX4100 and SRX4200 devices from 20.2R2
Product-Group=junosvae
Packet loss might be seen on SRX4100 and SRX4200 devices from 20.2R2
PR Number
Synopsis
Category: Integrated Routing & Bridging (IRB) module
1685406
The protocol MTU for the IRB interface is not rolled back when the MTU of the IRB or IFD interfaces is modified or deleted
Product-Group=junos
On all Junos platforms, the maximum transmission unit (MTU) on the Integrated Routing and Bridging (IRB) interface is not getting reset when the MTU configuration on IRB or IFD is removed. When MTU configuration is removed from the IRB interface, the internal data structure for the MTU configuration is not getting reset which might affect traffic and it is a rare case.
PR Number
Synopsis
Category: JFlow bug tracker for SRX platforms
1688627
The system may crash when Jflow inactive timeout is configured to be less than 'previous flow-inactive-timeout + 180' seconds
Product-Group=junos
On SRX platforms, when Jflow inactive timeout is configured to be less than 'previous flow-inactive-timeout + 180' seconds result in a system crash and core files are generated.
PR Number
Synopsis
Category: l2 flow module
1599891
OSPF neighbor won't establish under Transparent mode when neighborship across different zone
Product-Group=junos
Some of the OSPF neighborship might not able to establish after system bootup when the neigborship connect to SRX via different zone under transparent mode
PR Number
Synopsis
Category: Layer2 forwarding on EX/NTF/PTX/QFX
1638987
The L3 traffic is impacted in DCI scenario
Product-Group=junos
On all Junos and Junos Evolved platforms with DCI(Data Center Interconnect) setup, L3 traffic is impacted due to the remote mask not being updated for the static entries.
PR Number
Synopsis
Category: Label Distribution Protocol
1680574
In an LDP -> BGP LU stitching scenario, Multiple LSPs will not be installed in the forwarding table, even if BGP Multipath and ECMP are enabled
Product-Group=junos
On all Junos and Junos OS Evolved Platforms, when BGP LU (Labeled Unicast) routes are exported to LDP (Label Distribution Protocol) to perform LDP->BGP-LU stitching, LDP installs only one NH(Next Hop) in the forwarding table instead of multiple NHs, even when BGP Multipath and ECMP are enabled. This issue will be seen for both EBGP (External Border Gateway Protocol) and IBGP (Internal Border Gateway Protocol) multipaths on PTX platforms and for only iBGP multipaths on all other platforms.
PR Number
Synopsis
Category: Multiprotocol Label Switching
1616841
Protected LSP goes down with strict hops and link protection configured
Product-Group=junos
On all Junos and all EVO platforms, the sub-LSP of a Point-to-Multipoint Label Switched Path(P2MP LSP) with link-protection and having strict hops goes down when a protected link on more than one sub-LSP goes down simultaneously and TED(Traffic Engineering Database) notification or RSVP tunnel local repair message not received before the CSPF(Constrained Shortest Path First) computation. As a result, the sub-LSP fails and traffic drop is seen.
PR Number
Synopsis
Category: For multicast snooping on MX
1636261
Message 'Initialize libjtask-license first! for mcsnoopd' is seen after committing configuration
Product-Group=junos
On all Junos platforms, a harmless message is observed on the terminal output after committing the multicast snooping configuration.
PR Number
Synopsis
Category: FreeBSD Kernel Infrastructure
1681783
On Ex4400 upgrade failure happens when upgrading through a USB drive.
Product-Group=junos
On EX4400 upgrade failure happens when upgrading through a USB drive.
PR Number
Synopsis
Category: Kernel MPLS / Tag / P2MP Infrastructure
1681892
The RE crashes when MPLS next-hop is created and deleted frequently
Product-Group=junos
On all Junos platforms, when the system is up for a very long time, tag stats counters increase and cross the 32-bit capacity when MPLS next-hop is created/deleted frequently, resulting in RE (routing engine) crash.
PR Number
Synopsis
Category: PFE Peer Infra
1667674
The FPC might fail to initialize on Junos platforms
Product-Group=junos
On all Junos platforms, in a very corner case, the FPC (Flexible PIC Concentrators) might fail to initialize and remains in a stuck state when an FPC is installed or rebooted.
PR Number
Synopsis
Category: Kernel Tunnel Interface Infrastructure
1676912
IS-IS packet drop observed for packets having GRE over FTI-VXLAN header
Product-Group=junos
All Junos platforms face the issue of IS-IS (Intermediate System-to-Intermediate System) packet drop where the packet headers are GRE (Generic routing encapsulation) over FTI-VXLAN (Flexible Tunnel Interface-Virtual Extensible LAN). Such packets are dropped at sender side kernel in the egress direction due to incorrect handling.
PR Number
Synopsis
Category: Protocol Independant Multicast
1676154
The rpd crash can be seen in MoFRR scenario
Product-Group=junos
On all Junos and Junos Evolved platforms, the rpd ( routing protocol daemon) can crash when PIM (Protocol Independent Multicast), MoFRR (Multicast only Fast Reroute) configuration is present and some network churn event such as continuous interface cost changes, resulting in a change of active and backup paths for ECMP (Equal Cost Multi-Path) happens. There will be service impact because of the rpd crash but the system self-recovers until the next crash.
PR Number
Synopsis
Category: PPPoE functional plugin for bbe-smgd
1685070
Multiple bbe-smgd cores might be observed resulting in subscribers being lost or failing to login in the Enhanced subscriber scenario
Product-Group=junos
On MX platforms, multiple bbe-smgd cores might be observed due to out-of-bound memory access in the Enhanced subscriber scenario when bringing up PPPoE (Point-to-Point Protocol over Ethernet) subscribers and ACI (agent circuit identifier)/ARI (agent remote identifier) are part of the payload.
PR Number
Synopsis
Category: QFX L2 PFE
1667069
PVLAN IGMP packet is forwarded between Isolated ports and also duplicated to primary vlan port (Promiscous).
Product-Group=junos
When Isolated port receives IGMP packet, it should not be forwarded to other Isolated ports but was forwarded and also duplicated to primary vlan port (Promiscous).
1676772
VLAN translation mapping gets deleted when one of the member interface removed from LAG
Product-Group=junos
On all QFX5k, EX4650 and EX4600 platforms, if port has VLAN translation configuration and LAG interfaces connected on same FPC then incoming traffic can drop if one member of LAG interface is deleted/removed.
1681614
LLDP neighborship fails to come up with a Private VLAN configuration
Product-Group=junos
On the Junos platforms, In a Virtual Chassis (VC) scenario if the interface is configured with Private VLAN (PVLAN) and connected through the Flexible PIC Concentrator (FPC) of the non-master switch, the LLDP (Link Layer Discovery Protocol) neighborship fails to come up and traffic through the interface will be impacted.
PR Number
Synopsis
Category: QFX10008/16 QFX10002 optics related issues.
1677325
Interfaces with QFX-10000-30C and QFX10000-30C-M Line Cards will not work properly
Product-Group=junos
On QFX10K platforms, interfaces with QFX-10000-30C and QFX10000-30C-M Line Cards will not work properly with FEC (Forward Error Configuration) and links connected to them will remain down.
PR Number
Synopsis
Category: QFX5100 Interface related issues
1688023
The LLDP output packets are not transmitting on the em0 interface of Junos and Junos OS Evolved platforms
Product-Group=junos
On Junos and Junos OS Evolved platforms, if a management Ethernet interface(em0) has an inet or inet6 family configured and "delete interfaces em0" is issued, the Link Layer Discovery Protocol (LLDP) output packets will stop transmitting, causing the LLDP neighborship to remain down in peer router.
PR Number
Synopsis
Category: rosen-6 and rosen-7 mvpn bugs
1592303
The rpd process might crash when deactivating or deleting a routing-instance
Product-Group=junos
On all Junos and Junos Evo platforms, rpd core might be seen in the RE (Routing Engine), when deactivating or deleting a routing instance configured with NG-MVPN (Next Generation Multicast VPN), PIM (Protocol Independent Multicast) and having three or more entries of the same MVPN routes inside it [example - receiving 3 or more route entries for 1 MVPN route from different route reflectors].
PR Number
Synopsis
Category: SRX branch platforms
1594014
During reboot, "warning: requires 'idp-sig' license" can be seen on the screen even when the device has valid license
Product-Group=junos
If a device is rebooted manually or reboots for any other reason, The following messages can be seen on the boot up screen even when the device has valid license and proper configuration to use the features like IDP/UTM
1675853
Netbios traffic (IRB broadcast) is getting dropped post upgrade on the SRX platform
Product-Group=junos
On SRX platforms, NetBIOS (Network Basic Input/Output System) broadcast packets originating from the client do not reach the SRX routing engine, which is required in case "set forwarding-options helpers port 137" is configured to forward NetBIOS to a server.
PR Number
Synopsis
Category: MX10003/MX204 Platform SW - Chassisd s/w defects
1315577
MX10003 : Despite of having all AC low/high PEM, "Mix of AC PEMs" alarm is raised
Product-Group=junosvae
When there is an input failure on one of the AC PEMs (low or high) its wrongly categorized as "Mix of AC PEMs", so instead of "PEM <> input failure" you will see "Mix of AC PEMs" alarm raised.
PR Number
Synopsis
Category: SRX-1RU platfom related protocol, QoS, filtering features et
1689705
SNMP MIB walk for jnxBoxDescr OID returns incorrect value
Product-Group=junosvae
On SRX4600 platforms running Junos, SNMP MIB walk for jnxBoxDescr OID returns the incorrect chassis name and model. This is only a display issue with no service impact.
PR Number
Synopsis
Category: Trio LU, IX, QX, MQ chip drivers, ucode & related SW
1681533
The line card gets crashed during node/interface statistics reporting with resource monitoring
Product-Group=junos
On MX platforms with specific line cards, the MPC may crash and generate core dumps in a corner case during node/interface statistics reporting scenario when resource monitoring is used.
PR Number
Synopsis
Category: Trio pfe bridging, learning, stp, oam, irb software
1677631
DHCP bindings will fail for the client connected on an LT interface when DHCP snooping is enabled
Product-Group=junos
On all Junos and Junos Evolved platforms, Dynamic Host Configuration Protocol (DHCP) bindings will fail for the clients connected on an LT(Logical Tunnel) interface when DHCP snooping is enabled. This issue is not seen when DHCP snooping is disabled or when clients and server are on other interfaces.
PR Number
Synopsis
Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1673176
"gethostbyname: Host name lookup failure" is displayed during commit
Product-Group=junos
On all SRX Series devices with J-Web enabled, "gethostbyname: Host name lookup failure" is displayed during commit. This issue is a display issue and doesn't have any service impact.
PR Number
Synopsis
Category: Issues related to all UI tools (mgd-bsd/cli-bsd, XML and DMI
1681656
System uptime display is shown in minutes instead of seconds
Product-Group=junos
On all Junos and Junos Evolved platforms, after the device reboot, show system uptime command is showing time in minutes instead of seconds for 24 hours.
PR Number
Synopsis
Category: Virtual Router Redundancy Protocol
1650873
Authenitcation key can not be configured more than 15 character
Product-Group=junos
Dual masters are seen in VRRP when the devices are running two different Junos versions.
1666519
The long EVPN DF election hold time causes BUM traffic loss
Product-Group=junos
On all Junos and Junos OS Evolved platforms, EVPN (Ethernet Virtual Private Network) DF (Designated Forwarder) election will take time when LAG (Link Aggregation Group) interface as a part of EVPN Multihoming comes up. As a result, BUM (Broadcast, Unknown-unicast and Multicast) traffic will be lost for a while.
1680178
VRRP master-master condition might occur when there are more than two devices in the VRRP group
Product-Group=junos
When more than two devices are part of the VRRP group and a lower priority master sends a keepalive as master, low priority backup may transition to master state and get stuck.
1683871
If vrrp authentication key is more than 16 characters instead of commit error it is ignoring remaining characters
Product-Group=junos
A new commit check is added for the "vrrp authentication-key" stanza to validate its length. An Error will be returned if the authentication key exceeds 8 characters for simple and 16 for md5.
20.3R3-S6 - List of Known issues
PR Number
Synopsis
Category: EX4300 HA (GRES, NSR, NSB)
1665562
EX4300-48MP: VC: NSSU aborted with Backup RE maybe in inconsistent state
Product-Group=junosvae
For NSSU to work fix should be present in the Base image. The issue started from 21.4R2 onwards. e.g If NSSU is done from 21.4 to 22.2 fix should be present in 21.4 image.
PR Number
Synopsis
Category: EX4300 Layer 2 implementation
1684072
The l2cpd process crash may be observed when disabling RSTP on an interface
Product-Group=junos
On all Junos and Junos Evolved platforms, the l2cpd process may crash and generates the core when disabling RSTP (Rapid Spanning Tree Protocol) on an interface.
PR Number
Synopsis
Category: EX4300 Platform implementation
1687407
EX4300-48MP "Factory Reset/Mode button cannot toggle status mode LED (SPD, DX, EN, and PoE)
Product-Group=junosvae
"Factory Reset/Mode button on the far right side of the front panel is used to toggle the Status LED to show the different port parameters for the network ports. You can tell which port parameter is indicated by the Status LED by looking at which port status mode LED (SPD, DX, EN, and PoE) is lit. "Factory Reset/Mode button was unable to toggle status mode LED (SPD, DX, EN, and PoE)
PR Number
Synopsis
Category: EX-Series VC Infrastructure
1685067
EX4600-VC - Master RE reboot and All-member reboot lead to PFE Manager hogging logs when SFP-T is plugged in
Product-Group=junos
On Junos EX4600 Virtual Chassis (VC), the master RE reboot and all-members reboot lead to the PFE Manager hogging logs when SFP-T pluggable is installed in. The PFE Manager hogging logs has no functionality impact (PR 1641556).
1700133
EX4600 VC: Member Disconnect observed during VC initialization after reboot (with I2C read access failure)
Product-Group=junos
When ?request system reboot all members? command is executed on EX4600VC, post reboot one of the FPCs may disconnect and join the VC back. The FPC reboots with reason "FXPC_RENESAUS_RETRY_FAILURE: fxpc_fpga_fpc_ideeprom_read: FAILED retry to Renesaus chip", This issue may be hit approximately once in 10-12 attempts of cli command ?request system reboot all members? execution.
PR Number
Synopsis
Category: QFX PFE CoS
1688455
The FPC crash would be observed when the same CoS configuration is applied with wildcard for all the physical interfaces and AE
Product-Group=junos
On all Junos platforms, in a scaled scenario when some of the ge/xe/et interfaces are members of Aggregated Ethernet (AE) and the Class of Service (CoS) forwarding-class-set configuration is applied with a wildcard for all the physical interfaces and AE, it would trigger a Flexible PIC Concentrators (FPC) crash which leads to traffic loss.
PR Number
Synopsis
Category: a20a40 specific issue
1681701
"%DAEMON-4: Set system alarm failed: Operation not supported by device" message is seen on high end SRX
Product-Group=junos
On high end SRX platform, "%DAEMON-4: Set system alarm failed: Operation not supported by device" message is seen when system/chassis alarm is generated
PR Number
Synopsis
Category: PTX10003 Interface related issues
1580113
JVISION optics sensor's alarm data type changed from " bool_val" to "str_val"
Product-Group=junos
it changes the format specifier of alarms from string to boolean for following leafs. lane_tx_loss_of_signal_alarm lane_rx_loss_of_signal_alarm lane_tx_laser_disabled_alarm
PR Number
Synopsis
Category: QFX52xx platforms Interface running EVO
1545455
The chip on FPC line card might crash when the system reboots.
Product-Group=junos
On the FPCs with Broadcom chip, if the jinsightD (health-mon) is not disabled ("set system processes health-mon disable"), the FPC might crash during the system booting. Traffic loss is seen during the FPC crash and restart.
PR Number
Synopsis
Category: Express BT PFE L3 Features
1657659
Junos OS Evolved: PTX Series: Multiple FPCs become unreachable due to continuous polling of specific SNMP OID (CVE-2022-22211)
Product-Group=junos
A limitless resource allocation vulnerability in FPC resources of Juniper Networks Junos OS Evolved on PTX Series allows an unprivileged attacker to cause Denial of Service (DoS). Please refer to https://kb.juniper.net/
JSA69916
[juniper.net]
for more information.
PR Number
Synopsis
Category: MX Platform SW - FRU Management
1636118
FPCs may get restarted due to either faulty PEM module
Product-Group=junos
On all MX platforms, in the case of a faulty PEM module present in the device, the process "chassisd" may get a hog and FPC may get restarted.
PR Number
Synopsis
Category: FIB telemetry, fibtd, libocaft repositories
1662999
network-instance name for streaming telemetry to be changed from default to DEFAULT to align with CONFIG stanza
Product-Group=junos
for ONDATRA test case which tested this with different network-instance names - DEFAULT. test is failing. for TEST to pass ,use network-instance names - default.
PR Number
Synopsis
Category: Control plane EVPN multicast
1670435
EVPN multicast traffic may get impacted because of routes getting stuck in the kernel routing table (krt) queue
Product-Group=junos
On all Junos and Junos Evolved platforms with Ethernet Virtual Private Network(EVPN) enabled, in the presence of certain triggers like rpd restart, rollback of configuration etc., EVPN multicast routes might get stuck in the kernel routing table (krt) queue due to which the corresponding routes in the forwarding table may point to 'fictitious' next hops, resulting in traffic disruption.
PR Number
Synopsis
Category: Express PFE including evpn, vxlan
1627876
Traffic loss might be observed due to Address Resolution Protocol (ARP) getting programmed as indirect next-hop by control plane for external routes distributed over IRB on QFX10k Junos platforms
Product-Group=junos
On QFX10k Junos platforms Address Resolution Protocol (ARP) host might get programmed as indirect next-hop by control plane for routes reachable via IRB host.
PR Number
Synopsis
Category: Express PFE L2 fwding Features
1693424
Traffic loss is observed when the ECMP path is IRB over AE (IPv4->MPLS)
Product-Group=junos
On QFX10002 platforms, when the ECMP (Equal-cost multi-path) path is IRB (Integrated routing and bridging) over AE (Aggregated Ethernet) {IPv4->MPLS (Multiprotocol Label Switching)} results in packets getting discarded for which traffic loss is observed.
PR Number
Synopsis
Category: Express ASIC platform
1683562
On PTX5000 platforms when a command is issued to power off an FPC, it gets stuck in the 'Announce Offline' state
Product-Group=junos
When an FPC (Flexible PIC Concentrator) on PTX5000 platforms is shut down by issuing a request command (request chassis offline slot ) or by FPC power off configuration (set chassis fpc x power off), it gets stuck in the 'Announce Offline' state since the associated timer (fru_graceful_offline_timer) doesn't increment and expire as it is supposed to.
PR Number
Synopsis
Category: idp flow creation, deletion,notification, session mgr intfce
1686105
IDP unwanted attacks (false positives) detected on the traffic
Product-Group=junos
On all Junos SRX platforms with 19.4 and 20.1 releases, IDP (Intrusion Detection and Prevention) false positive attacks can be exempted from the policy for traffic continuity. The impact is that unexpected signatures may trigger in certain conditions and IDP false positive attacks may be detected.
PR Number
Synopsis
Category: Fast Ethernet interfaces
1684142
Traffic is getting impacted as interface hold-time is not working with wan-phy framing
Product-Group=junos
On all Junos MX series platforms, when hold timer and wan-phy are configured, traffic gets impacted when the link goes down on an interface within the configured hold timer.
PR Number
Synopsis
Category: jl2tpd daemon
1667950
VMcore or RE crash might be triggered due to the memory corruption when the FPC is restarted for LNS subscribers
Product-Group=junos
On all MX platforms, when Flexible PIC Concentrators (FPCs) restart for L2TP network server (LNS) subscribers stacked over aggregated service interface (asi) and LNS subscribers belong to more than one routing instance causes the VMcore or Routing Engine (RE) crash and brings down all the traffic.
PR Number
Synopsis
Category: Adresses ALG issues found in JSF
1604123
Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed (CVE-2022-22175)
Product-Group=junos
An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause a flowprocessing daemon (flowd) crash and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. Refer to https://kb.juniper.net/
JSA11281
[juniper.net]
for more information.
PR Number
Synopsis
Category: Label Distribution Protocol
1550158
NSR may get in out of sync status due to race condition
Product-Group=junos
LDP add duplicate registertion and infra does not like it. This happen during the race condition between rpd and kernel to detect the unreplicate NSR config with error condition.
PR Number
Synopsis
Category: SW PRs for MPC10E Chassisd
1664448
The command "show chassis fpc" shows inaccurate information about heap memory
Product-Group=junos
The command "show chassis fpc" shows inaccurate information about heap memory in output.
PR Number
Synopsis
Category: Multiprotocol Label Switching
1697982
[MX]L2VPN ping is failing when UHP rsvp LSP is used.
Product-Group=junos
MPLS L2VPN ping is getting failed when MX is egress. In egress, RE verifies whether received label is VC label or not. For most of the platforms, tunnel label will be removed in PFE before punting the echo request packet to RE. But in this platform, tunnel label is not removed hence RE verifies this tunnel label and it is returning no-mapping.
1701800
Memory leak issue in TED
Product-Group=junos
On all Junos and Junos Evolved platforms, a memory leak is observed in TED (Traffic Engineering Database) when the inet tables is not cleaned up after routing instance deactivation.
PR Number
Synopsis
Category: Category for tracking Olympus-MX issues
1671649
Traffic loss seen due to SPC3's packets getting stuck
Product-Group=junos
On Junos MX960, MX480 platforms, Flowd restart or PIC offline/online( Physical Interface Cards) causes SPC3's sending of packets to get stuck.
PR Number
Synopsis
Category: TCP/UDP transport layer
1637928
Junos OS: Peers not configured for TCP-AO can establish a BGP or LDP session even if authentication is configured locally (CVE-2022-22237)
Product-Group=junos
An Improper Authentication vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause an impact on confidentiality or integrity. Please refer to https://kb.juniper.net/
JSA69893
[juniper.net]
for more information.
PR Number
Synopsis
Category: vMX Data Plane Issues
1669261
vMX crashes due to MBUF leaks
Product-Group=junos
vMX platforms (MX150) will crash as a result of the MBUF (Memory Buffer) leak.
PR Number
Synopsis
Category: QFX5200/5110/5120/5210 Interface
1657534
FEC link is down after disabling/enabling interface
Product-Group=junos
On the QFX5200-32C-32Q platform, on disabling and enabling interfaces, the Fast Ethernet channel (FEC) might mismatch. It impacts service as the FEC link might not come up.
PR Number
Synopsis
Category: Resource Reservation Protocol
1657872
Memory utilization keeps incrementing due to the path error message
Product-Group=junos
On all Junos and Junos Evolved platforms, when a no-cspf Label Switched Path (LSP) with strict Explicit Route Object (ERO) is configured and the egress device is disconnected, a high rate of Path Error (PathErr) messages are observed which is leading to high memory utilization and triggering the chassisd crash that causes the device to be out of control, either it can not be accessible via console/ssh or it will not trigger Routing Engine (RE) switchover as well if it is dual-RE. So this would cause an outage.
PR Number
Synopsis
Category: Cover Logical System Infrastrcuture Development
1694449
The process srxpfd/ flowd will crash on SRX devices
Product-Group=junos
On all SRX platforms (except branch SRX series) configured with chassis cluster redundancy group, when numerous logical interfaces or IFLs (> 1K) are deleted and traffic is running for those IFLs, or if the RG failover then the process srxpfed/ flowd will crash.
PR Number
Synopsis
Category: SRX branch platforms
1658276
reth interface does not go up due to speed mismatch when reth interface speed is changed afger RG0 failover
Product-Group=junos
On SRX series platform with chassis cluster enabled, reth interface might not go up due to speed mismatch when reth interface speed is changed afger RG0 failover
PR Number
Synopsis
Category: Trio LU, IX, QX, MQ chip drivers, ucode & related SW
1645505
FPC crash might occur during ISSU upgrade
Product-Group=junos
On MX/EX/SRX platforms, FPC crash might be observed during ISSU (In-Service Software Upgrade)upgrade in specific line cards (eg MPC9/8/7).
Modification History
First Publication 2022-12-12
20.3R3-S6: Software Release Notification for JUNOS Software