Alert Type
PSN - Product Support Notification
Risk
Risk Description
Low/Notification
Software Release Notification
Impact
Impact Description
Low/Notification
Software Release Notification
Product Affected
ACX EX PTX QFX MX NFX SRX vSRX
Alert Description
Junos Software Service Release version 22.4R1-S1 is now available for download from the Junos software download site
Download Junos Software Service Release:
Go to
Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select
Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as need and follow the prompts
Solution
Junos Software service Release version 22.4R1-S1 is now available.
22.4R1-S1 - List of Fixed issues
PR Number
Synopsis
Category: EX4300 Filters implementation
1699777
TCAM space might be exhausted when learning DHCP snooping entries on a trusted port
Product-Group=junos
On EX, QFX5k, and MX platforms having persistent binding for DHCP (Dynamic Host Configuration Protocol) snooping configured might cause TCAM (Ternary Content Addressable Memory) space exhaustion for DHCP snooping learning on the trusted port after the device reboot.
PR Number
Synopsis
Category: MX YT-ZF Linecards Timing software
1692202
JNP10K-LC9600: G.8275.1: Synce to PTP and SyncE to 1PPS Transient Response not meeting G.8273.2 mask
Product-Group=junos
JNP10K-LC9600: G.8275.1: Synce to PTP and SyncE to 1PPS Transient Response not meeting G.8273.2 mask
1701017
JNP10K-LC9600: G.8275.1: Multiple GRES operation resulting in huge time error
Product-Group=junos
JNP10K-LC9600: G.8275.1: Multiple GRES operation resulting in huge time error
PR Number
Synopsis
Category: a20a40 specific issue
1698797
Fabric monitoring suspension and control link failure may cause HA cluster outage
Product-Group=junos
In HA cluster, a local node failure which causes control link to go down may not guarantee the other node to take over primary if the fabric link monitoring suspension was triggered earlier before (e.g. - caused by a minor hardware failure), as the fabric link down event would be ignored when the other node was in RG0 ineligible state. This is a corner case to https://www.juniper.net/documentation/us/en/software/junos/chassis-cluster-security-devices/topics/topic-map/security-chassis-cluster-failover-parameters.html#id-understanding-chassis-cluster-control-link-heartbeats-failure-and-recovery__d27575e82. And PR1698797 fixed this defect.
PR Number
Synopsis
Category: Firewall Filter
1697959
Deactivating and activating the GRES causes churn in dfwd filter addition/deletion
Product-Group=junos
On all Junos dual-RE platforms, when performing activate/deactivate Graceful Routing Engine Switchover (GRES) multiple times synchronization issues are observed between the master and backup dfwd process.
PR Number
Synopsis
Category: jdhcpd daemon
1698798
A dcd process crash is observed continuously when the dhcp-service is restarted
Product-Group=junos
On MX platforms that support Broadband Edge (BBE) functionality, the dcd crash continuously occurs when the subscribers are logged in using the DHCP dynamic profile and dhcp-service is restarted having the configuration like "set chassis network-services enhanced-ip" enabled.
PR Number
Synopsis
Category: JSR Application Services
1704061
22.4R1- srxpfe.core observed with EVPN/VXLAN configured
Product-Group=junos
When type 5 evpn is configured, for some corner case such as policy action is reject, a coredump might be hit due to cached information invalid. The fix will be included in all later release such as 22.4R1S1, 22.4R2, 23.1R1.
PR Number
Synopsis
Category: Issues related to Junos licensing infrastructure
1696879
License key is not installed after upgrade
Product-Group=junos
On all Junos Evolved platforms, Installation of node-lock license key on config mode doesn't get installed after upgrade. If any of the protocols are enabled by the license key, it will be impacted after the software upgrade.
PR Number
Synopsis
Category: MX Timing software
1696957
In the rare scenario, huge PTP Time errors are introduced and propagated to the downstream devices after the chassis reboot
Product-Group=junos
On MX240, MX480, MX960, MX2010, and MX2020 platforms, the remote PTP (Precision Time Protocol) clock will recover the PTP clock with Time errors after a chassis reboot on the device running as Boundary Clock.
PR Number
Synopsis
Category: TCP/UDP transport layer
1685113
BGP session flap with error BGP_IO_ERROR_CLOSE_SESSION
Product-Group=junos
On all Junos and Junos Evolved platforms, a random BGP (Border Gateway Protocol) session flaps will be observed immediately after committing certain configuration changes with the error "BGP_IO_ERROR_CLOSE_SESSION" along with a TCP connection reset. This issue is generic to any TCP (Transmission Control Protocol) connection that has MD5 (Message-Digest Algorithm) enabled on it, eg targeted LDP. Following error is also reported: rpd: bgp_pp_recv: rejecting connection from a.b.c.d (Internal AS xyz), peer in state Established rpd: bgp_pp_recv:5159: NOTIFICATION sent to a.b.c.d+64150 (proto): code 6 (Cease) subcode 5 (Connection Rejected)
PR Number
Synopsis
Category: Shard routing infrastructure within RPD
1696035
An rpd crash is observed while creating indirect-next-hop in the BGP sharding environment with bgp.l3vpn.0 with next-shop as a color route
Product-Group=junos
On Junos MX and Junos Evolved PTX platforms with BGP (Border Gateway Protocol) sharding enabled, an rpd crash is observed for indirect-next-hop is not created properly for the tunnel route when the route is received in the sharding thread in bgp.l3vpn.0 with next-hop as the color route.
PR Number
Synopsis
Category: RPM and TWAMP
1703104
The TWAMP test session packets are dropped when the payload is less than 52 bytes
Product-Group=junos
On all Junos OS Evolved platform and Junos platform is using MPC10E/MPC11E/JNP10K-LC9600 linecards, If a Two-Way Active Management Protocol (TWAMP) client from a different vendor is transmitting a packet that is smaller than the 52 bytes then (the minimum allowed by RFC5357 is 41), the TWAMP reflector will be unable to function. Any packets from the TWAMP client will therefore be ignored. Similar to this, juniper boxes will also block any answers that are less than 52 bytes long, causing TWAMP test sessions to report a packet loss.
PR Number
Synopsis
Category: MX10003/MX204 Linux issues (including driver issues)
1660446
MX204 - SSH non-default port configuration causes FPC offline after upgrade to 21.4
Product-Group=junos
For MX204, MX10003, ACX5448 platform, if a non-default ssh port is configured for system login, after upgrade to 21.4 release, the FPC is stuck in offline. To avoid such issue please use default SSH port and use protect RE filter to only allow the access from the trusted source.
PR Number
Synopsis
Category: ZT/YT pfe firewall software
1701320
Traffic loss is seen on MPC10E due to null pointer access without any safe check
Product-Group=junos
On the Junos MX series platforms with MPC10/11, when the line card is inserted, it restarts and traffic loss is seen generating the core dump due to the null pointer access without any safe check.
PR Number
Synopsis
Category: Trio pfe bridging, learning, stp, oam, irb software
1696106
Packets received from type-5 tunnel are not sent out to local CE in EVPN-VxLAN scenario
Product-Group=junos
IIn EVPN-VxLAN scenario, traffic drop can be seen for some local CEs which are multihomed to at least one MX Router as the packets
PR Number
Synopsis
Category: Configuration management, ffp, load action
1671112
Test Configuration might fail even though the config file is having valid configurations
Product-Group=junos
Root cause; In test configuration flow we are calling mustd as "/usr/sbin/mustd -q /var/run/db/file.data /var/run/db/file.data+ -F -m" where we just copy the existing cog.db (generated out of committed config) as cdg.db+ , use it for testing the configuration passed, and remove it once the testing is done. This is creating the issue because the configuration is tested against the existing cdg.db. Fix would be to create the cdg.db fresh from the configuration to be tested and test the configuration against that. This new cdg.db should not replace the existing one in /var/run/db.
PR Number
Synopsis
Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1679413
Configuration filtering doesn't work when the logical system is present
Product-Group=junos
On SRX platforms, configuration filtering doesn't work when the logical system is present.
1699245
The mgd process might crash during commit synchronize
Product-Group=junos
On all Junos OS and Evolved OS platforms with dual RE (Routing Engine) during commit script synchronize, backup RE mgd get crash once the memory leak reaches to 65K due to which commit configuration will fail which are performed through Master RE.
PR Number
Synopsis
Category: ACX interface software related issues.
1670033
Performance Monitoring for 400ZR optics reporting data as Suspect with reason "Int Too Short"
Product-Group=junos
TBD
22.4R1-S1 - List of Known issues
PR Number
Synopsis
Category: OAM support on ACX
1637615
Junos OS: ACX2K Series: Receipt of a high rate of specific traffic will lead to a Denial of Service (DoS) (CVE-2023-22391)
Product-Group=junos
A vulnerability in class-of-service (CoS) queue management in Juniper Networks Junos OS on the ACX2K Series devices allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). Refer to https://kb.juniper.net/
JSA70187
[juniper.net]
for more information.
Resolved In:
junos:19.4R3-S9 junos:20.2R3-S7 junos:20.3R3-S6 junos:20.3X75-D35 junos:20.3X75-D42 junos:20.4R3-S4 junos:21.2R3-S3 junos:21.3R3-S3
PR Number
Synopsis
Category: MX YT-ZF Linecards Timing software
1692272
JNP10K-LC9600: G.8275.1: PTP and PTP to PTP Noise transfer performance not meeting G.8273.2 mask
Product-Group=junos
JNP10K-LC9600: G.8275.1: PTP and PTP to PTP Noise transfer performance not meeting G.8273.2 mask
Resolved In:
junos:22.4R1-S1 junos:22.4R2
1697167
JNP10K-LC2101: Observing huge time error with master/slave on different line cards
Product-Group=junos
Spikes seen in 2way time error with JNP10K-LC2101 is either ptp slave or master and any switchover is done
Resolved In:
junos:22.4R2 junos:23.1R1
PR Number
Synopsis
Category: EVO RPD agent PRs
1694773
RPD core is seen after the switchover
Product-Group=junos
On all dual-RE Junos Evolved platforms, RPD core will be seen in the new master RE after the switchover when NSR is enabled. This issue will be seen when before the switchover, any catastrophic configuration change like 'evpn protocol normalization' is done.
Resolved In:
evo:22.4R2-EVO evo:23.1R1-EVO evo:23.2R1-EVO junos:22.4R2 junos:23.1R1
PR Number
Synopsis
Category: Flow Module
1692062
APBR:MNHA: When PMI mode is enabled, Uplink-incoming-interface-name not updated properly though link switch is successful by APBR as well as symmetric routing maintained.
Product-Group=junos
Occasionally APPTRACK_SESSION_CLOSE log from the previously active node(current warm node) shows the wrong uplink interface name when PMI mode is enabled.
Resolved In:
junos:22.4R2 junos:23.1R1
PR Number
Synopsis
Category: MX Timing software
1696028
MX10008/MX10004: G.8275.1: PTP over AE: PTP clock goes into FREERUN instead of HOLDOVER upon disabling phase locked slave AE interface
Product-Group=junos
MX10008/MX10004: G.8275.1: PTP over AE: PTP clock goes into FREERUN instead of HOLDOVER upon disabling phase locked slave AE interface
Resolved In:
PR Number
Synopsis
Category: QFX L2 PFE
1706515
DCPFE crashes which leads to FPC restart
Product-Group=junos
On Junos QFX and EX platforms, the DCPFE (Dense Concentrator Packet Forwarding Engine) crashed continuously after configuring the unsupported telemetry sensor '/junos/system/linecard/npu/utilization/' leading to the restarting of FPC. Once FPC is restarted, traffic is impacted.
Resolved In:
junos:21.4R3-S3 junos:22.2R3 junos:22.3R3 junos:22.4R2 junos:23.1R1
PR Number
Synopsis
Category: QFX EVPN / VxLAN
1697614
Local multicast traffic forwarding issue can be seen on QFX5K in EVPN-VXLAN OISM setup
Product-Group=junos
On Junos QFX5K devices in OISM (Optimised Inter Subnet Multicast) scenario, there can be issues with local multicast traffic forwarding between VLANs (Virtual Local Area network). This issue will be seen when there are similar VLAN and VLANRW (Virtual Local Area Network Rewrite) configurations on AE (Aggregated Ethernet) interfaces and VLAN from the AE interface is deleted. This issue is a rare timing issue and the recovery method is to add a new VLAN on the interface before deleting the existing VLAN config.
Resolved In:
junos:22.2R2-S1 junos:22.2R3 junos:22.3R2 junos:22.3R3 junos:22.4R2 junos:23.1R1
PR Number
Synopsis
Category: QFX5200/5110/5120/5210 Platfom issues
1710855
qfx-5e (TVP) Junos image installation issue on certain Junos Release on QFX5100.
Product-Group=junosvae
Due to software defect caused by PR1676220, qfx-5e (TVP) Junos image cannot be installed on QFX5100. The PFE (Packet forwarding Engine) will crashing continuously and FPC wouldn't be seen online in show chassis fpc output.
Resolved In:
junos:20.4R3-S7 junos:21.4R3-S3 junos:22.2R3 junos:22.3R3 junos:22.4R2 junos:23.1R1 junos:23.1R2
PR Number
Synopsis
Category: RPD Next-hop issues including indirect, CNH, and MCNH
1698516
On Junos platforms MPLS resolving over IPV6 route traffic drop is seen
Product-Group=junos
On Junos platforms error messages seen with traffic drops on labelled route present in mpls.0 resolving over a IPV6 prefix.
Resolved In:
evo:22.2R2-S2-EVO evo:22.2R3-EVO evo:22.3R3-EVO evo:22.4R2-EVO evo:23.1R2-EVO evo:23.2R1-EVO junos:22.2R2-S2 junos:22.2R3 junos:22.3R3 junos:23.1R1 junos:23.1R2
PR Number
Synopsis
Category: Shard routing infrastructure within RPD
1696035
An rpd crash is observed while creating indirect-next-hop in the BGP sharding environment with bgp.l3vpn.0 with next-shop as a color route
Product-Group=junos
On Junos MX and Junos Evolved PTX platforms with BGP (Border Gateway Protocol) sharding enabled, an rpd crash is observed for indirect-next-hop is not created properly for the tunnel route when the route is received in the sharding thread in bgp.l3vpn.0 with next-hop as the color route.
Resolved In:
evo:22.4R1-S1-EVO evo:22.4R2-EVO evo:23.1R1-EVO evo:23.2R1-EVO junos:22.4R2 junos:23.1R1
PR Number
Synopsis
Category: ZT/YTpfe bridging, learning, stp, oam, irb software
1664694
Not all MAC addresses are learnt for some VPLS instances after "clear vpls mac-table" command is executed
Product-Group=junos
Not all MAC addresses are learnt for some VPLS instances after "clear vpls mac-table" command is executed
Resolved In:
evo:23.2R1-EVO
PR Number
Synopsis
Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1638847
The mustd process crash might be observed with persist-group-inheritance
Product-Group=junos
On all Junos platforms configured with persist-group-inheritance, which is enabled by default from 19.4R3 onwards, might lead to mustd process crash in highly scaled configuration.
Resolved In:
evo:23.2R1-EVO
Modification History
First Publication 2023-02-13
22.4R1-S1: Software Release Notification for JUNOS Software