Alert Type
PSN - Product Support Notification
Risk
Risk Description
Low/Notification
Software Release Notification
Impact
Impact Description
Low/Notification
Software Release Notification
Alert Description
Junos Software Service Release version 20.4R3-S6 is now available for download from the Junos software download site
Download Junos Software Service Release:
Go to
Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select
Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as need and follow the prompts
Solution
Junos Software service Release version 20.4R3-S6 is now available.
20.4R3-S6 - List of Fixed issues
PR Number
Synopsis
Category: EX4300 PFE
1675977
The fxpc process crash might be observed on EX4300 and EX4300-VC platforms
Product-Group=junos
On EX4300 platforms, if there are mac-move events, the fxpc (Packet Forwarding Engine manager) crash might be observed due to race conditions.
1697685
Gratuitous ARP reply will not update the ARP cache
Product-Group=junos
On EX4300 platforms, the ARP (Address Resolution Protocol) cache will not be updated upon receiving the Gratuitous ARP reply even with "gratuitous-arp-reply" configured.
PR Number
Synopsis
Category: EX4300 Platform
1678506
The interface on the device will go down when one or more interfaces are connected to the Advantech3260 device at another end
Product-Group=junosvae
On EX4300 platforms with version 19.1R3 and above, the interface on the device will go down when the device is connected to the Advantech3260 device at the other end. It will have a traffic impact.
1680225
On EX4300-Virtual Chassis (VC) platforms, the pfex process might crash when PIC 2 is detached
Product-Group=junos
On EX4300-Virtual Chassis (VC) platforms, Packet Forwarding Engine process (pfex) crash will be seen when Physical Interface Card 2(PIC 2) is detached then Physical Interface(IFD) is getting deleted before logical interface (IFL)deletion.
PR Number
Synopsis
Category: EX4300 Filters implementation
1699777
TCAM space might be exhausted when learning DHCP snooping entries on a trusted port
Product-Group=junos
On EX, QFX5k, and MX platforms having persistent binding for DHCP (Dynamic Host Configuration Protocol) snooping configured might cause TCAM (Ternary Content Addressable Memory) space exhaustion for DHCP snooping learning on the trusted port after the device reboot.
PR Number
Synopsis
Category: EX2300/3400 platform
1680408
On Ex2300 and EX3400, "set system ports console log-out-on-disconnect" does not allow user to log in via console.
Product-Group=junos
On certain units, with "set system ports console log-out-on-disconnect", when you login to the device via a console, the user will be kicked out to the login prompt and be asked to login again.
PR Number
Synopsis
Category: EX-Series VC Infrastructure
1689946
Instability observed after mastership switchover on members with SFP-T pluggable installed on EX4600-VC
Product-Group=junos
On Junos EX4600 Virtual Chassis (VC), a routing engine master switchover may lead members to disconnect from the VC for approx. 2 mins before the members re-join the VC. This instability will lead to traffic loss. This only happens on members with SFP-T pluggable installed.
PR Number
Synopsis
Category: ACX L3 IPv4, IPv6 support
1692400
dc-pfe: HEAP malloc(0) detected! when a VPLS instance is deactivated in ACX5048.
Product-Group=junos
dc-pfe: HEAP malloc(0) detected! when a VPLS instance is deactivated in ACX5048. This are informational messages and the fix of this PR hides the messages from console output.
PR Number
Synopsis
Category: a20a40 specific issue
1698797
Fabric monitoring suspension and control link failure may cause HA cluster outage
Product-Group=junos
In HA cluster, a local node failure which causes control link to go down may not guarantee the other node to take over primary if the fabric link monitoring suspension was triggered earlier before (e.g. - caused by a minor hardware failure), as the fabric link down event would be ignored when the other node was in RG0 ineligible state. This is a corner case to https://www.juniper.net/documentation/us/en/software/junos/chassis-cluster-security-devices/topics/topic-map/security-chassis-cluster-failover-parameters.html#id-understanding-chassis-cluster-control-link-heartbeats-failure-and-recovery__d27575e82. And PR1698797 fixed this defect.
PR Number
Synopsis
Category: BBE interface related issues
1687138
The PIMv6 is not getting enabled for L2TP subscribers
Product-Group=junos
On MX platforms, the Protocol-Independent Multicast version 6 (PIMv6) might not get enabled when it is configured over the Layer 2 Tunneling Protocol (L2TP) Subscriber Interface using the Dynamic-profiles.
PR Number
Synopsis
Category: Class of Service
1671040
Packet drop might be seen on MX platforms with MPC10/MPC11/LC9600 line cards
Product-Group=junos
On MX platforms with MPC10/MPC11/LC9600 line cards, packet drop might be seen when transmit-rate as percentage and 'transmit-rate exact' is configured without defining the value of transmit-rate in the traffic-control-profiles (TCP).
1693977
The oid tree jnxCosQstatEntry returns nothing for some interfaces after restarting class-of-service
Product-Group=junos
The oid tree jnxCosQstatEntry returns nothing for some interfaces after restarting class-of-service.
PR Number
Synopsis
Category: Enhanced Broadband Edge support for cos
1687642
COS memory errors are observed when "chassis traffic-manager enhanced-priority-mode" is configured
Product-Group=junos
On all Junos platforms in the Junos subscriber-management(JSM) scenario, COS memory errors related to the chassis might be seen during subscriber login. When the memory errors increase PFE may go into a bad state and may affect a few subscriber traffic.
PR Number
Synopsis
Category: QFX Access Control related
1693640
The dot1x reauthentication will not work for a port with VoIP VLAN
Product-Group=junos
On Junos EX platforms, the dot1x clients will remain in connecting state after the 'clear dot1x interface' is done due to which the interface would not get authenticated to become a member of the configured access VLAN. When this happens, VLAN membership will not be formed.
PR Number
Synopsis
Category: Device Configuration Daemon
1695663
The Unicast traffic is dropped on QFX5100/EX46xx-VC platforms
Product-Group=junos
On QFX5100/EX46xx Junos platforms configured with Virtual Chassis(VC), if a master member is unplugged or forced to power off, the unicast traffic is dropped due to mac-persistence-timer expiry there is a difference in mac addresses between logical aggregated parent interface and member aggregated ethernet(ae) interface.
PR Number
Synopsis
Category: Layer 3 forwarding, both v4+v6
1553262
FEB coredump and reset if the core link or protocol flap
Product-Group=junos
On ACX710 or ACX5448 platform, if the "chained-composite-next-hop" is configured and there are ECMP paths to remote peer, when one of the core facing interfaces has a protocol flap or interface flap, the FEB will core dump and reset.
PR Number
Synopsis
Category: Manageability for Node Virtualization
1583324
JDM server creation might fail on junos node slicing setup in in-chassis mode
Product-Group=junos
On MX platforms the JDM (Juniper Device Manager) server could not be created in in-chassis mode of junos node slicing, which results in mgd process crash and affects GNF's (Guest Network Function) provisioning.
PR Number
Synopsis
Category: AAA, auditd issues
1622936
Idle/inactive netconf user sessions not terminated as per the config set under class
Product-Group=junos
Session idle time was not supported for netconf session in EVO, as part of the current PR extending this feature support. This might result in dangling sessions.
PR Number
Synopsis
Category: EVPN Layer-2 Forwarding
1662954
In EVPN-MPLS Mutihoming scenario DF election will get stuck in the Preference based state
Product-Group=junos
On all Junos and Junos Evolved platforms supporting preference-based DF (Designated Forwarder) election in EVPN-MPLS Multihoming scenario, the DF election will be stuck in the Preference based state if there will be a change in the df-election on the fly.
PR Number
Synopsis
Category: Control plane EVPN multicast
1670435
EVPN multicast traffic may get impacted because of routes getting stuck in the kernel routing table (krt) queue
Product-Group=junos
On all Junos and Junos Evolved platforms with Ethernet Virtual Private Network(EVPN) enabled, in the presence of certain triggers like rpd restart, rollback of configuration etc., EVPN multicast routes might get stuck in the kernel routing table (krt) queue due to which the corresponding routes in the forwarding table may point to 'fictitious' next hops, resulting in traffic disruption.
PR Number
Synopsis
Category: Express PFE L2 fwding Features
1693424
Traffic loss is observed when the ECMP path is IRB over AE (IPv4->MPLS)
Product-Group=junos
On QFX10002 platforms, when the ECMP (Equal-cost multi-path) path is IRB (Integrated routing and bridging) over AE (Aggregated Ethernet) {IPv4->MPLS (Multiprotocol Label Switching)} results in packets getting discarded for which traffic loss is observed.
PR Number
Synopsis
Category: SRX1500 platform software
1690621
SRX1500 chassis cluster port ge-0/0/1 does not work in switching mode
Product-Group=junos
SRX1500 chassis cluster port ge-0/0/1 on a node is not working in switching mode when this interface is configured in L2 (layer2) mode.
PR Number
Synopsis
Category: Express ASIC platform
1683562
On PTX5000 platforms when a command is issued to power off an FPC, it gets stuck in the 'Announce Offline' state
Product-Group=junos
When an FPC (Flexible PIC Concentrator) on PTX5000 platforms is shut down by issuing a request command (request chassis offline slot ) or by FPC power off configuration (set chassis fpc x power off), it gets stuck in the 'Announce Offline' state since the associated timer (fru_graceful_offline_timer) doesn't increment and expire as it is supposed to.
PR Number
Synopsis
Category: GMIC2 platform driver issues
1693211
MACsec on logical interfaces fails after port flap
Product-Group=junos
MACsec configured on logical interfaces (IFL) would fail to restore after a flap of the parent physical interface. This will lead to Cyclic Redundancy Check (CRC) errors and failure to pass traffic.
PR Number
Synopsis
Category: Fast Ethernet interfaces
1684142
Traffic is getting impacted as interface hold-time is not working with wan-phy framing
Product-Group=junos
On all Junos MX series platforms, when hold timer and wan-phy are configured, traffic gets impacted when the link goes down on an interface within the configured hold timer.
PR Number
Synopsis
Category: Kernel software for AE/AS/Container
1649958
The user-defined speed does not take effect on the AE interface in certain scenarios on Junos platforms
Product-Group=junos
On Junos platforms supporting GRES (Graceful Routing Engine Switchover), the bandwidth flag on the backup RE (Routing Engine) for the AE interfaces is set unconditionally, hence the bandwidth is struck at a value despite not being set by the user statically. When GRES is performed followed by link delete/add for the AE interface, the interface would get stuck with the bandwidth and gets synced with the backup RE. There can be seen partial service impact in the case of the RSVP (Resource Reservation Protocol) and the restoration to recover from this issue is to configure bandwidth manually and then remove the configuration.
PR Number
Synopsis
Category: jdhcpd daemon
1698798
A dcd process crash is observed continuously when the dhcp-service is restarted
Product-Group=junos
On MX platforms that support Broadband Edge (BBE) functionality, the dcd crash continuously occurs when the subscribers are logged in using the DHCP dynamic profile and dhcp-service is restarted having the configuration like "set chassis network-services enhanced-ip" enabled.
PR Number
Synopsis
Category: jl2tpd daemon
1667950
VMcore or RE crash might be triggered due to the memory corruption when the FPC is restarted for LNS subscribers
Product-Group=junos
On all MX platforms, when Flexible PIC Concentrators (FPCs) restart for L2TP network server (LNS) subscribers stacked over aggregated service interface (asi) and LNS subscribers belong to more than one routing instance causes the VMcore or Routing Engine (RE) crash and brings down all the traffic.
PR Number
Synopsis
Category: Flow Module
1683835
The non-fragmented packets will get dropped on the SRX5K platforms with SPC3 card
Product-Group=junos
On SRX5K platforms with SPC3 card and IFD enabled, when the fragmented and non-fragmented traffic are processed in a burst on the IPsec tunnel, the non-fragmented packets will get dropped. There will be a very small number of packet drops seen.
1705996
The PMI mode IPSEC tunnel on SRX4100/4200/4600, vSRX, and SRX5K with SPC3 card will core when the route is changed frequently
Product-Group=junos
In a race condition, when PMI (power-mode-ipsec) is enabled and routes are changing frequently on SRX4100/4200/4600, vSRX, and SRX5K with SPC3 card, the core will be seen.
PR Number
Synopsis
Category: SRX Firewall Authentication
1685116
The user authentication page is not rendering on the client browser
Product-Group=junos
On all Junos SRX platforms due to cross-origin restriction access, the domain page does not load. The issue happened due to a firewall authentication failure.
PR Number
Synopsis
Category: High Availability/NSRP/VRRP
1678772
New secondary node to go into a disabled state after ISSU and failover RG0 because of fabric link failure
Product-Group=junos
On SRX5K platforms with SPC3 card, the primary node will lose the backup node and fabric link failure is observed resulting in the new secondary node going into a disabled state after ISSU (In-Service Software Upgrade) and failover RG0 (redundancy group) in a chassis cluster environment.
1691071
Chassis cluster IP monitoring on the secondary node failed after the system reboot on the SRX platforms
Product-Group=junos
On SRX platforms, IP monitoring on the secondary node failed when a Reth (redundant Ethernet) interface consists of two or more than two interfaces on each node. Reth member interface which has a higher port number cannot receive ICMP (Internet Control Message Protocol) packet used for IP monitoring, which will then put the system in an error state.
PR Number
Synopsis
Category: Firewall Network Address Translation
1655197
Syslog mode stream performance limitation for pba-interim-logging
Product-Group=junos
Syslog mode stream performance limitation for pba-interim-logging during syslog messages bursts.
PR Number
Synopsis
Category: IPSEC/IKE VPN
1667223
VPN traffic loss is seen after HA node reboot while using traffic selectors
Product-Group=junos
On all Platforms, traffic across static VPNs (Virtual Private Network) with traffic selectors might be affected after reboot of one node in the cluster and failover to it.
PR Number
Synopsis
Category: Issues related to Junos licensing infrastructure
1568788
Warning "Ignoring the key for unknown feature id: XXX" is generated when a valid license is installed into a device
Product-Group=junos
The license file may include features that can be used without the license and you may see the following warning messages when you install a license. We have changed the "warning" with "information" as follows. "information: 31f85f9c-49c7-4e58-a8d1-80bb57ee4369: Ignoring the key for feature id: 164. This feature is not used by your product."
PR Number
Synopsis
Category: SW PRs for MPC10E Interfaces
1642584
MPC10E: Quick 100G link-flaps has still some race conditions which can cause MQSS stream drain failures and xqss_sched_flush_queue failures
Product-Group=junos
On MPC10E cards upon many very quick link down and up events in msec range might not always able to drain all traffic in the queue. This causes lost of traffic going through the interface. Traffic volume and class-of-service configuration does influence the exposure. See also PR1638410.
PR Number
Synopsis
Category: MPC11 ULC interface software related issues.
1698135
XQSS_CMERROR _DSTAT_INT_REG_DROP0_QDEPTH_UNDRN alarm is seen on MX2K platforms with MPC11E line cards upon aggregate interface down/flap event
Product-Group=junos
On MX2010 or MX2020 platforms with MPC11E line cards, if a member link of an aggregate interface goes down or flaps, it might trigger "XQSS_CMERROR_DSTAT_INT_REG_DROP0_QDEPTH_UNDRN" alarm and disable-pfe action is executed. The affected PFE (Packet Forwarding Engine) will be disabled and no traffic will pass through it.
PR Number
Synopsis
Category: Multiprotocol Label Switching
1690458
On a controller based MPLS setup with container LSPs, rpd daemon crashes after LSP deletion occurs
Product-Group=junos
On all Junos-based platforms, in a scenario where an external controller is provisioned, rpd crashes when an externally controlled container LSP (Label Switched Path) is deleted and the software tries to update its status.
1694648
The rpd crash will be observed during the MPLS label block allocation
Product-Group=junos
On all Junos and Junos Evolved platforms in the Multiprotocol Label Switching (MPLS) scenario, the rpd crash will happen in rare conditions during MPLS label block allocation.
1697982
[MX]L2VPN ping is failing when UHP rsvp LSP is used
Product-Group=junos
MPLS L2VPN ping is getting failed when MX is egress. In egress, RE verifies whether received label is VC label or not. For most of the platforms, tunnel label will be removed in PFE before punting the echo request packet to RE. But in this platform, tunnel label is not removed hence RE verifies this tunnel label and it is returning no-mapping.
1701800
Memory leak issue in TED
Product-Group=junos
On all Junos and Junos Evolved platforms, a memory leak is observed in TED (Traffic Engineering Database) when the inet tables is not cleaned up after routing instance deactivation.
PR Number
Synopsis
Category: Kernel MPLS / Tag / P2MP Infrastructure
1702220
LDP flaps will be observed having LT interface with VLAN and LDP running between the logical-system instance and global instance
Product-Group=junos
On Junos platforms, when the LT (Logical Tunnel) interface with VLAN and LDP (Label Distribution Protocol) is configured between the logical-system instance and global instance LDP flaps are observed.
PR Number
Synopsis
Category: JUNOS Network App Infrastructure (for ping, traceroute, etc)
1697643
NTP threshold reject action does not work on all Junos platforms
Product-Group=junos
When CLI command "set system ntp threshold action reject" is set on all Junos platforms, the nodes are still getting NTP updates although the NTP time is above the configured threshold.
PR Number
Synopsis
Category: TCP/UDP transport layer
1685113
BGP session flap with error BGP_IO_ERROR_CLOSE_SESSION
Product-Group=junos
On all Junos and Junos Evolved platforms, a random BGP (Border Gateway Protocol) session flaps will be observed immediately after committing certain configuration changes with the error "BGP_IO_ERROR_CLOSE_SESSION" along with a TCP connection reset. This issue is generic to any TCP (Transmission Control Protocol) connection that has MD5 (Message-Digest Algorithm) enabled on it, eg targeted LDP. Following error is also reported: rpd: bgp_pp_recv: rejecting connection from a.b.c.d (Internal AS xyz), peer in state Established rpd: bgp_pp_recv:5159: NOTIFICATION sent to a.b.c.d+64150 (proto): code 6 (Cease) subcode 5 (Connection Rejected)
PR Number
Synopsis
Category: OSPF routing protocol
1700966
OSPF stuck in InitStrictBFD state for the neighbor which doesn't send LLS header
Product-Group=junos
When Strict BFD (Bidirectional Forwarding Detection) for OSPF (Open Shortest Path First) configured on all Junos OS and Junos OS Evolved platforms, and one or more OSPF neighbors don't support Link-Local Signaling ("LLS", RFC5613), the adjacency with these neighbor(s) might stuck in InitStrictBFD state upon adjacency initialization. Neighbor doesn't support LLS, hence it doesn't attach the LLS header, which is a pre-requisite for Strict BFD.
PR Number
Synopsis
Category: Express Chip L3 software
1650217
IRP memory parity issue might result in traffic loss on PTX and QFX10k Junos platforms
Product-Group=junos
On PTX Series routers and the QFX10000 line of switches running Junos OS, parity issues might be observed related to Ingress Result Processor (IRP) memory might result in traffic loss.
PR Number
Synopsis
Category: QFX access control list
1695820
On QFX5110-VC-VCF platforms, the commit check throws an error when the firewall filter with DSCP action is enabled
Product-Group=junos
On QFX5110-VC-VCF (Virtual-Chassis Fabric) platform, if the master has member id 0, the commit check gives a warning on FPC (Flexible PIC Concentrators) and throws an error, when the firewall filter with action DSCP (Differentiated Services Code Point) is configured and is applied it to any interface, with member 1 as the master.
PR Number
Synopsis
Category: QFX L2 PFE
1672583
The link is up after a power cycle and software reboot but traffic does not flow
Product-Group=junos
On the EX4600 device with SFP-LX10/SFP-SX, after a power cycle/software reboot, all ports are initialized and links are up with auto-negotiation enabled. Few ports are up and traffic flows whereas few ports are up but no traffic flow through them.
1694076
PFE crash is seen on all Junos QFX5K and EX46xx platforms with L2PT configuration
Product-Group=junos
PFE (Packet Forwarding Engine) crashes on all Junos QFX5K and EX46xx platforms when L2PT (Layer 2 Protocol Tunneling) is configured on the interface having flexible-vlan-tagging with encapsulation extended-vlan-bridge. It causes a traffic impact.
PR Number
Synopsis
Category: QFX MPLS PFE
1687257
QFX5120 will drop ingress traffic on an l2circuit configured interface on continuous flapping
Product-Group=junosvae
On QFX5120 platforms, when a flap occurs in a Layer 2 Circuit (L2Circuit) configured interface, l2circuit configuration programming fails on the interface and leads to a traffic drop.
PR Number
Synopsis
Category: QFX EVPN / VxLAN
1651827
The MAC address from local CE may not be learned due to the VLAN programming issue
Product-Group=junos
On QFX5k series platforms, MAC address from local CE (customer edge) might not get learned when EVPN (Ethernet VPN)/VxLAN (Virtual Extensible LAN) is configured. The traffic drop is expected as MAC learning may not happen.
1687565
VxLAN configured on access port breaks L2 connectivity with "vxlan encapsulate-inner-vlan" knob
Product-Group=junos
On all Junos QFX5k platforms, L2 connectivity fails when "vxlan encapsulate-inner-vlan" knob is configured on an access port. It impacts a forwarding plane and causes a traffic impact.
PR Number
Synopsis
Category: QFX5100 Interface related issues
1665800
Ports with SFP-T 1G plugged in may go to hung state on QFX5100 platforms
Product-Group=junos
When the remote end server/system reboots, QFX5100 platform ports with SFP-T 1G inserted may go into a hung state and remain in that state even after the reboot is complete. This may affect traffic after the remote end system comes online and resumes traffic transmission.
1669436
On specific QFX5k platforms, member links may reduce their configured speed when the other side doesn't have auto-negotiation disabled
Product-Group=junos
On QFX5110, QFX5120, QFX5200-32C and QFX5100 Junos platforms, the member link reduces its speed if there is an optics/cable issue, which effectively reduces the overall AE (Aggregate Ethernet) link speed. This is an undesired behavior since the matching speed is one of the mandatory criteria for a member link to join an AE.
1688023
The LLDP output packets are not transmitting on the em0 interface of Junos and Junos OS Evolved platforms
Product-Group=junos
On Junos and Junos OS Evolved platforms, if a management Ethernet interface(em0) has an inet or inet6 family configured and "delete interfaces em0" is issued, the Link Layer Discovery Protocol (LLDP) output packets will stop transmitting, causing the LLDP neighborship to remain down in peer router.
PR Number
Synopsis
Category: Cover Logical System Infrastrcuture Development
1694449
The process srxpfd/ flowd will crash on SRX devices
Product-Group=junos
On all SRX platforms (except branch SRX series) configured with chassis cluster redundancy group, when numerous logical interfaces or IFLs (> 1K) are deleted and traffic is running for those IFLs, or if the RG failover then the process srxpfed/ flowd will crash.
PR Number
Synopsis
Category: SRX branch platforms
1594014
During reboot, "warning: requires 'idp-sig' license" can be seen on the screen even when the device has valid license
Product-Group=junos
If a device is rebooted manually or reboots for any other reason, The following messages can be seen on the boot up screen even when the device has valid license and proper configuration to use the features like IDP/UTM
PR Number
Synopsis
Category: MPC7/8/9 Interface Issues
1682962
Auto-negotiation is not getting reflected on the MPC7E-10GE line card
Product-Group=junos
On all MX platforms with MPC7E-10GE line card, auto-negotiation will not be set properly when changing the port speed from 10GE to 1G on a port with auto-negotiation configured. The port remains down until the commit is done separately for changing the port speed.
PR Number
Synopsis
Category: SRX-1RU platfom related protocol, QoS, filtering features et
1689705
SNMP MIB walk for jnxBoxDescr OID returns incorrect value
Product-Group=junos
On SRX4600 platforms running Junos, SNMP MIB walk for jnxBoxDescr OID returns the incorrect chassis name and model. This is only a display issue with no service impact.
PR Number
Synopsis
Category: Trio pfe l3 forwarding issues
1701147
FPC restart and core dump generated in MPLS scaled scenario with always-mark-connection-protection-tlv" configured
Product-Group=junos
FPC restart and core dump generated in MPLS scaled scenario with always-mark-connection-protection-tlv" configured.
PR Number
Synopsis
Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1637552
During the ephemeral configuration database changes, "mgd" core files might be generated
Product-Group=junos
On all Junos platforms, "mgd" core files might be generated when the ephemeral configuration database changes.
PR Number
Synopsis
Category: For GPRS security features on highend SRX series
1704472
GTPv2 Message Filtering is not working
Product-Group=junos
GTPv2 Message Filtering not working - resolved
PR Number
Synopsis
Category: Virtual Router Redundancy Protocol
1680178
VRRP master-master condition might occur when there are more than two devices in the VRRP group
Product-Group=junos
When more than two devices are part of the VRRP group and a lower priority master sends a keepalive as master, low priority backup may transition to master state and get stuck.
20.4R3-S6 - List of Known issues
PR Number
Synopsis
Category: EX-Series VC Infrastructure
1700133
One of the Virtual Chassis members on EX4600-VC might be disconnected during VC initialization
Product-Group=junos
On EX4600-VC, when "request system reboot all members" is executed, post-reboot one of the VC member/Flexible PIC Concentrator(FPC) might disconnect and join the VC back due to Packet Forwarding Engine (PFE) restart. Traffic loss is seen when FPC is disconnected.
Resolved In:
junos:20.2R3-S7
PR Number
Synopsis
Category: Express PFE MPLS Features
1590387
ISIS adjacency is not coming up through TCC l2circuit
Product-Group=junos
On ACX/PTX/QFX platforms(PTX10002/10003/10008/10016/QFX10002/10003/10008/10016/ACX6360) if protocols l2circuit and channel tcc is enabled for providing layer 2 transaction, ISIS connection through the layer 2 domain might get failed and traffic loss might be seen.
Resolved In:
junos:19.4R3-S8 junos:20.3R3-S4 junos:21.1R3-S1 junos:21.2R3 junos:21.2R3-S3 junos:21.3R2 junos:21.3R3-S3 junos:21.4R2 junos:21.4R3-S1 junos:22.1R1 junos:22.1R3 junos:22.2R1-S2 junos:22.2R2 junos:22.2R3 junos:22.3R2 junos:22.4R1
PR Number
Synopsis
Category: Platform infra to support jvision
1706155
The PFE fabric telemetry data(128.0.0.xx->128.0.0.1 udp 2000) was forwarded to data port
Product-Group=junos
The packets with internal ip address 128.0.0.xx -> 128.0.0.1 and upd port 2000 might be forwarded out the default egress interfaces. Such packets are telemetry data for PFE fabric sensor, which should be sent to routing-engine only.
Resolved In:
PR Number
Synopsis
Category: Label Distribution Protocol
1550158
NSR may get in out of sync status due to race condition
Product-Group=junos
LDP add duplicate registertion and infra does not like it. This happen during the race condition between rpd and kernel to detect the unreplicate NSR config with error condition.
Resolved In:
evo:20.4R1-EVO evo:21.1R1-EVO junos:20.4R1 junos:20.4R2 junos:21.1R1
PR Number
Synopsis
Category: Microkernel for neo mpc
1670137
Multibit ECC error causes the whole MX platform chassis to go down
Product-Group=junos
Faulty FPC (Flexible PIC Concentrator) on the MX platform chassis exhibiting multibit ECC (Error Checking and Correction) error (L2 cache error) will trigger this issue. The whole chassis goes down until the faulty FPC is removed from the chassis.
Resolved In:
junos:21.2R3-S4 junos:21.4R3-S3 junos:22.2R3 junos:22.3R2 junos:22.4R1 junos:22.4R2
PR Number
Synopsis
Category: FreeBSD Kernel Infrastructure
1568757
The image validation is not supported during upgrading from Pre 21.2 to 21.2 and onward
Product-Group=junos
When upgrading from releases before Junos OS Release 21.2 to Release 21.2 and onward, validation and upgrade might fail. The upgrading requires using of 'no-validate' configuration statement.
Resolved In:
PR Number
Synopsis
Category: OSPF routing protocol
1705975
OSPF routes are not getting installed after the interface is flapped
Product-Group=junos
On all Junos and Junos Evolved platforms, the OSPF (Open Shortest Path First) routes are not getting installed when the interface is flapped multiple times. A deadlock is created when the OSPF routers wait for an LSA (Link State Advertisement) with a P2P (Point-to-Point) link to be advertised from its neighbouring router to add it to its router LSA and at the same time the neighbouring router also waits for an LSA with a P2P link to be advertised to add it to its router LSA. Both the OSPF routers advertise their router LSA without a P2P link and as a result, routes are not getting installed.
Resolved In:
evo:22.2R3-EVO evo:22.3R2-EVO evo:22.3R3-EVO evo:22.4R2-EVO evo:23.1R1-EVO evo:23.2R1-EVO junos:22.2R3 junos:22.3R2 junos:22.3R3 junos:22.4R2 junos:23.1R1
PR Number
Synopsis
Category: Express Chip L3 software
1660606
MVPN traffic is getting dropped on PTX/QFX series platforms
Product-Group=junos
On all Junos PTX and QFX10k series platforms, MVPN (Multicast Virtual Private Network) traffic is getting dropped with a discarded error. This is because, the way LSI (Label Switched Interface) interface data is carried from ASIC (Application-Specific Integrated Circuit) to PFE (Packet Forwarding Engine) is changed, causing MVPN to break.
Resolved In:
junos:19.3R3-S7 junos:19.4R3-S9 junos:20.3X75-D35 junos:20.3X75-D41 junos:20.3X75-D42 junos:20.3X75-D43 junos:20.4R3-S4 junos:21.1R3-S3 junos:21.2R3-S1 junos:21.2R3-S2 junos:21.3R3 junos:21.4R3 junos:22.1R2 junos:22.2R1 junos:22.2R2 junos:22.3R1
PR Number
Synopsis
Category: QFX EVPN / VxLAN
1694345
Non-DF forwards brodcast DHCP offer packets on QFX5120 swithes.
Product-Group=junos
If AE interfaces are configured with ESI, the Non-DF forwards brodcast DHCP offer packets to CE device. From 21.1R1, the hardware handles these brodcast DHCP packets. So, the Non-DF filter hits and the CE devices do NOT receives duplicate packet.
Resolved In:
1695058
Intra VLAN communication breaks in SP style config using VXLAN
Product-Group=junos
Change from Enterprise (EP) to Service Provider (SP) style configuration result in reachability issue in pure L2 (Virtual Extensible LAN protocol) VXLAN setup.
Resolved In:
junos:22.2R3 junos:22.3R2 junos:22.3R3 junos:22.4R2 junos:23.1R1
PR Number
Synopsis
Category: QFX5100 Virtual Chassis
1679919
PFE process crash might be observed on QFX5100 platforms
Product-Group=junos
On QFX5100 platforms (both stand-alone and VC scenario) running Junos, occasionally during the normal operation of the device, PFE (Packet Forwarding Engine) can crash resulting in total loss of traffic. The PFE reboots itself following the crash.
Resolved In:
junos:21.4R3-S2
PR Number
Synopsis
Category: Resource Reservation Protocol
1593959
ISIS BFD sessions may take a long time to recover when the interface flaps
Product-Group=junos
When RSVP link-protection bypass LSPs active after the primary link goes down and comes back up. The BFD session over the interface stays down until all LSPs using the bypass LSPs come back up. This happens because RSVP installs a /32 route pointing to the bypass tunnel which is required to signal backup LSPs. This route is removed when all LSPs stop using bypass after the link comes back up. This is day 1 RSVP behavior.
Resolved In:
evo:21.2R3-S1-EVO evo:21.3R3-EVO evo:21.4R2-EVO evo:22.1R1-EVO evo:22.2R1-EVO junos:19.4R3-S6-J13 junos:21.2R3-S1 junos:21.2R3-S3 junos:21.3R3 junos:21.4R2 junos:22.1R1 junos:22.2R1
1694777
Restarting FPC or router reboot might causes some CCC interfaces to go down due to a 'Remote CCC down'
Product-Group=junos
On all Junos and Junos OS Evolved platforms, if CCC (Circuit Cross-Connect) is configured to use a label-switched-path such as IGP routed, i.e., no-cspf and no strict ERO (Explicit Route Object) configuration, then restarting egress CCC node or restarting FPC on the egress CCC node containing remote-interface-switch configuration multiple times may cause CCC to remain stuck in remote-if-down state, resulting in loss of traffic. (The knob 'remote-interface-switch' is configured on the egress LER of the RSVP-TE LSP (Resource Reservation Protocol-Traffic Engineering label-switched-path) which binds the LSP terminating on the node to a local interface).
Resolved In:
evo:22.4R2-EVO evo:23.1R1-EVO junos:20.4R3-J8 junos:22.4R2 junos:23.1R1
PR Number
Synopsis
Category: RPM and TWAMP
1522488
rmopd reports false TCP errors in the log messages: RMOPD_TWAMP_SOCKOPT_FAILURE setsockopt(TCP_KEEP.*) failed, error: Invalid argument. This is cosmetic issue.
Product-Group=junos
rmopd reports false TCP errors in the log messages: RMOPD_TWAMP_SOCKOPT_FAILURE setsockopt(TCP_KEEP.*) failed, error: Invalid argument. This is cosmetic issue. The issue is fixed in Junos releases 21.1R1 and newer.
Resolved In:
PR Number
Synopsis
Category: MX10002 Platform SW - Platform s/w defects
1242847
Noticing continuous logging as "PEM power status has changed, run power budget again" at chassisd logs
Product-Group=junos
No function impact observed
Resolved In:
PR Number
Synopsis
Category: SRX-1RU platfom datapath SW defects
1620773
SRX4600 - Packet drop or srxpfe coredump might be observed
Product-Group=junos
Packet drop or srxpfe coredump might be observed on SRX 4600 during periods of high traffic
Resolved In:
PR Number
Synopsis
Category: Trio pfe stateless firewall software
1666966
The MPC hosting an AE member interface with a shared bandwidth policer configured at the AE could crash upon encountering an HMC fatal error
Product-Group=junos
MX MPC7/8/9, MX204 MPC, MX10003 MPC, JNP10K-LC2101, EX9200 MPC hosting an Aggregated Ethernet (AE) member interface with a shared bandwidth policer configured at the AE could crash upon encountering a Hybrid Memory Cube (HMC) fatal error.
Resolved In:
evo:22.2R3-EVO evo:22.3R2-EVO evo:22.4R2-EVO evo:23.1R1-EVO junos:22.2R3 junos:22.3R2 junos:22.4R2 junos:23.1R1
Modification History
2023-02-20 - Updated the content to removed PR1653861 from known issue table (the PR was incorrectly marked and has been updated)
First publication 2023-01-20
20.4R3-S6: Software Release Notification for JUNOS Software