Alert Type
SRN - Software Release Notification
Risk
Risk Description
Low/Notification
Software Release Notification
Impact
Impact Description
Low/Notification
Software Release Notification
Product Affected
ACX PTX QFX platforms running Junos Evolved Software
Alert Description
Junos Software Service Release version 21.2R3-S6-EVO is now available for download from the Junos software download site
Download Junos Software Service Release:
Go to
Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select
Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as need and follow the prompts
Solution
Junos Software service Release version 21.2R3-S6-EVO is now available.
21.2R3-S6-EVO - List of Fixed issues
PR Number
Synopsis
Category: Border Gateway Protocol
1643665
The BGP route may still be present in the multi-path route after increased IGP cost
Product-Group=evo
On all Junos and EVO platforms, when color-only is used and the igp-cost of the active path is high, then the BGP route may still be present in the multi-path route after increased IGP cost.
1679495
RV task replication will be stuck in the "NotStarted" state when routing-options validation is deactivated/activated
Product-Group=evo
On all Junos and Junos Evolved platforms with Non-Stop Routing (NSR) enabled, in a rare case, Route Validation (RV) task replication will be stuck in the "NotStarted" state when routing-options validation is deactivated/activated.
1728455
The rpd process crashes when BGP is cleaned up
Product-Group=evo
On Junos and Junos OS Evolved platforms, if static default RT-C (Route Target -Constrain) is configured when Border Gateway Protocol (BGP) is cleaned up (whole BGP is cleaned up), the routing process will crash.
1728604
Traffic impact is seen when there is a single peer in the proxy BGP group connected to the BGP route reflector
Product-Group=evo
On all Junos and Junos OS Evolved platforms, if the proxy BGP (Border Gateway Protocol) route reflector is connected to the only peer present in the BGP group then it stops advertising the routes coming from the remote cluster and that leads to proxy route-target routes not getting added which causes traffic disruption.
1732833
RPD core files might be seen when BGP RIB sharding is used
Product-Group=evo
RPD might stop responding and generate core files (or dump files) when BGP RIB sharding is used.
1739335
The rpd process crash will be observed when the prefix-limit exceeds on the backup RE
Product-Group=evo
On all Junos and Junos OS Evolved platforms configured with BGP (Border Gateway Protocol), NSR (Nonstop Active Routing), and prefix-limit with idle-timeout, when the prefix-limit exceeds on the backup RE (Routing Engine) and switchover is performed the rpd process crash will be observed on the new backup RE.
1739919
Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute (CVE-2023-0026)
Product-Group=evo
An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). Please refer to https://supportportal.juniper.net/
JSA71542
[juniper.net]
for more details.
PR Number
Synopsis
Category: Express BT PFE L3 Features
1651473
The BFD session might flap in some scaled system with churn
Product-Group=evo
On all Junos and Junos Evolved AFT (Advanced Forwarding Toolkit) platforms, this is infrastructure enhancement which was done to avoid BFD session flapping during the system churn. Without this infra enhancement, BFD session flap would happen in some scaled system with churn.
PR Number
Synopsis
Category: CFM
1682939
Maintenance-domain (MD) and Maintenance-association (MA) configuration display changed to ordered-by-system type
Product-Group=evo
With this the maintenance-domain (MD) configuration and maintenance-association (MA configuration) under the connectivity-fault-management stanza will be ordered by the system and not as per the configuration order.
PR Number
Synopsis
Category: ACX VxLAN Issue
1665828
MAC-IP bindings for IPv4 (ARP) and IPv6 (ND) may not be processed for IRB interfaces in an EVPN scenario
Product-Group=evo
On all Junos and Junos Evolved platforms, when EVPN (Ethernet Virtual Private Network) related configuration is introduced from baseline, due to a rare timing issue between the IRB (Integrated Routing and Bridging) interfaces coming up and an attempt is made by the 'l2ald' (l2 address learning) daemon to process the corresponding MAC-IP entries, this issue may occur. This may also occur when IRB logical units are activated and deactivated.
PR Number
Synopsis
Category: Ethernet OAM (LFM)
1714149
Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packet (CVE-2023-36848)
Product-Group=evo
An Improper Handling of Undefined Values vulnerability in the periodic packet management daemon (ppmd) of Juniper Networks Junos OS on MX Series(except MPC10, MPC11, and LC9600) allows an unauthenticated adjacent attacker to cause a Denial of Service (DoS). Please refer to https://supportportal.juniper.net/
JSA71659
[juniper.net]
for more information.
PR Number
Synopsis
Category: EVPN Layer-2 Forwarding
1646010
IRB might not send out arp-reply if "no-arp-suppression" is configured
Product-Group=evo
On all Junos platforms, when "no-arp-suppression" is configured, the Layer 2 Address Learning Manager (L2ALM) will not respond to Address Resolution Protocol (ARP) request for Integrated Routing and Bridging (IRB) IP, and traffic to IRB will be lost.
1669811
BUM traffic might be blackholed for ESI configured CE interface flap
Product-Group=evo
On Junos MX/QFX5K/QFX10K platforms and Junos Evolved ACX/MX platforms, on interface up/down event loop prevention might not work resulting in BUM traffic being blackholed.
1700170
In EVPN-VXLAN scenario, whenever there is any interface flap, this issue might be hit.
Product-Group=evo
In EVPN-VXLAN scenario, whenever there is any interface flap, this issue might be hit.
PR Number
Synopsis
Category: ISIS routing protocol
1725686
Unnecessary SPF calculation is causing high CPU utilization
Product-Group=evo
On all Junos and Junos Evolved platforms, very frequent SPF (Shortest Path First) calculation, being caused by leaking multiple prefixes across the IS-IS areas, is causing high CPU utilization.
PR Number
Synopsis
Category: jdhcpd daemon
1722082
DHCP binding is not happening in EVPN VXLAN topology with DHCP stateless relay (forward-only)
Product-Group=evo
In EVPN VXLAN topology with DHCP stateless relay (forward-only) configured at layer 3 gateways, Jdhcpd broadcasts snooped unicast offer packets. That leads to the offer getting dropped on its way to the client and then the IP negotiation fails.
PR Number
Synopsis
Category: Layer 2 Control Module
1739975
Layer 2 traffic will be dropped on VSTP disabled interface
Product-Group=evo
On Junos platforms, Whenever an interface is disabled under VSTP (VLAN Spanning Tre Protocol) configuration, the issue will be seen in the following cases. 1. When interface, IFBD (Interface Family Bridge Domain) and VSTP, configured via single commit. (In case of new configuration) 2. When VSTP configurations are present and chassisd restarts/device reboots, then issue will be seen. (During ifd delete and add, issue will be seen)
PR Number
Synopsis
Category: Layer2 forwarding on EX/NTF/PTX/QFX
1680242
The l2ald is treating mac as a duplicate causing traffic loss
Product-Group=evo
On all Junos and Junos Evolved platforms, with EVPN-VXLAN (Ethernet Virtual Private Network -Virtual Extensible Local Area Network) multihoming scenario, l2ald (Layer two Address Learning Daemon) considers the mac as duplicate, and traffic drop will be observed.
1727954
On all Junos and Junos Evolved platforms the l2ald process memory usage is seen to increase over time
Product-Group=evo
On all Junos and Junos Evolved platforms service impact is seen due to a consistent increase in l2ald (Layer 2 Address Learning Daemon) memory usage.
1743282
The l2ald crashes when there is recursive deletion of IFBD or when BGP neighborship is cleared in EVPN-VXLAN multi-homed configuration
Product-Group=evo
On all Junos and Junos OS Evolved platforms, in a rare scenario, due to timing issue, the l2ald (Layer 2 Address Learning Daemon) crashes and traffic is being blackholed due to recursive deletion of IFBD (Interface Family Bridge Domain) or when BGP (Border Gateway Protocol) neighborship is cleared when EVPN (Ethernet Virtual Private Network) - VXLAN (Virtual Extensible Local Area Network) with multi-homed is configured.
PR Number
Synopsis
Category: lacp protocol
1609618
LACP Member interfaces might get stuck in out of sync state
Product-Group=evo
When sync-reset feature is enabled on the device then few member interfaces might stay in out of sync state even when number of available child interfaces is greater than minimum-links configured for the Lag interface. This will affect the overall capacity of the lag interface.
PR Number
Synopsis
Category: MPC11 ULC interface software related issues.
1698135
XQSS_CMERROR_DSTAT_INT_REG_DROP0_QDEPTH_UNDRN alarm is seen on MX2K platforms with MPC11E line cards upon aggregate interface down/flap event
Product-Group=evo
On MX2010 or MX2020 platforms with MPC11E line cards, if a member link of an aggregate interface goes down or flaps, it might trigger "XQSS_CMERROR_DSTAT_INT_REG_DROP0_QDEPTH_UNDRN" alarm and disable-pfe action is executed. The affected PFE (Packet Forwarding Engine) will be disabled and no traffic will pass through it.
PR Number
Synopsis
Category: Multiprotocol Label Switching
1649565
The error severity of syslog message "ted_client reset" generated during the commit is incorrect
Product-Group=evo
On all Junos and Junos evolved platforms, the severity of syslog message "ted_client reset" that is generated by rpd process during the commit is incorrect. It only generates an error message in the syslog .
PR Number
Synopsis
Category: OSPF routing protocol
1737978
OSPFv3 using the VIP address on the IRB interface will not form adjacencies between peers
Product-Group=evo
OSPFv3 may not form adjacencies on IRB interfaces with VRRP configuration.
PR Number
Synopsis
Category: Provider Backbone (PBB) EVPN PFE functionality on MX
1529940
PBB-EVPN PE cannot learn remote CE MAC address due to ARP suppression enabled
Product-Group=evo
In PBB-EVPN (Provider Backbone Bridging - Ethernet VPN) environment, ARP suppression feature which is not supported by PBB might be enabled unexpectedly. This could cause MAC addresses of remote CEs not to be learned and hence traffic loss.
PR Number
Synopsis
Category: Protocol Independant Multicast
1720708
Slow convergence of PIM joins causes temporary traffic loss with scaled downstream interfaces
Product-Group=evo
On all Junos and Junos Evolved platforms with PIM (Protocol Independent Multicast), MVPN (Multicast Virtual Private Network) configured and when the number of downstream interfaces is more than three thousand, slow convergence of PIM joins is seen to take up more of the time and CPU, causing traffic loss for some time.
PR Number
Synopsis
Category: QFX EVPN / VxLAN
1665306
On QFX5K series platforms, duplicate packets might be seen in the multihomed scenario in an EVPN-VxLAN fabric when unicast ARP packets are received
Product-Group=evo
On QFX5K series platforms, when unicast ARP (Address Resolution Protocol) is received for a MAC address that is already learned in an EVPN-VxLAN (Ethernet VPN-Virtual Extensible LAN) environment, the ARP request is flooded and duplicate packets might be seen on leaf devices. We might see some service impact where split-horizon might not work or continuous mac-move might be seen. This issue is rare and very unlikely to occur in a production environment due to presence of intermediate switches which might resolve the unicast ARP query.
PR Number
Synopsis
Category: RPD infrastructure issues related to NSR, GRES, switchover,
1701146
The rpd crash will be observed when any commit is performed
Product-Group=evo
On all Junos and Evolved platforms with RSVP auto-mesh dynamic tunnel configuration, whenever a commit is done the rpd (Routing Process Daemon) crash will be seen. This happens due to null pointer access in the memory.
PR Number
Synopsis
Category: KRT Queue issues within RPD
1721032
Local route is not added in the secondary FIB on all Junos SRX platforms and routes will be permanently stuck in KRT queue
Product-Group=evo
On all Junos SRX platforms when ST (Secure-Tunnel) interface with P2MP (Point-to-Multipoint) is configured and interface routes are leaked via RIB-group (Routing Information Base), local route of the ST interface will not be leaked into forwarding-table of the secondary-RIB and it will be stuck in the KRT (Kernel Routing Table) queue.
PR Number
Synopsis
Category: RPD policy options
1706143
Issue in committing more than 23, 4-byte AS on Junos and Junos Evolved platforms
Product-Group=evo
On all Junos and Junos Evolved platforms, when a 4 byte autonomous system (AS) number is committed with more than 23 as-path in as-path-prepend policy it gives "rpd string" error and the configuration commit fails.
1744449
Policy change to a rib-group import-policy configured with global routing-options interface-routes causes the rpd issue on all platforms with EVPN-VXLAN configuration
Product-Group=evo
When a user configures "set routing-options interface-routes rib-group " along with an import policy for that particular rib-group, it will result in an unexpected behavior. It could disrupt the rpd or result in the rpd running at 100%. This issue is only related the "interface-routes" being configured in the global routing-options hierarchy with EVPN-VXLAN configuration. This issue won't be seen when routing-options configurations can have "interface-routes" enabled under specific routing instance.
PR Number
Synopsis
Category: RPD route tables, resolver, routing instances, static routes
1716153
Multipath route is not getting compute and skip the multipath eligibility check
Product-Group=evo
On all Junos platforms, multipath route will not be formed correctly when a BGP route is received from RR (Route Reflector) and preference decided based on cluster list length.
1742147
Memory leak observed when reconfiguring the flow routes
Product-Group=evo
On all Junos and Junos OS Evolved platforms, if the nexthop of a flow route is the same as it was before when reconfiguring flow routes, memory leak occurs. High memory use of routing process daemon(rpd) is seen as a result of this leak. A kernel out of memory message is observed which results BGP flap.
PR Number
Synopsis
Category: Trio pfe bridging, learning, stp, oam, irb software
1643416
RE switchover may result in traffic loss in a certain scenario
Product-Group=evo
On all Junos platforms that support MPLS with GRES and NSR enabled, on RE switchover through CLI or system reboot, traffic loss may happen.
PR Number
Synopsis
Category: Virtual Private LAN Services
1680687
The rpd crash is seen due to the creation of a new logical interface
Product-Group=evo
On all Junos Evolved and Junos MX platforms, when a new logical interface(LSI) is created, but the configuration was deleted as the kernel failed to add the interface will lead to rpd crash.
21.2R3-S6-EVO - List of Known issues
PR Number
Synopsis
Category: Dynamic rendering infrastructure
1681777
Invalid XML output can be seen for RPC get response
Product-Group=evo
If the configured data has special characters in it, then rpc get output will not escape these special characters and display the data as it is. For example, if we have configured qos class as , then ---- > the response should have default as response value .
Resolved In:
evo:21.4R3-S4-EVO evo:22.2R2-J6-EVO evo:22.2R2-S2-J2-EVO evo:22.3R2-S1-EVO evo:22.3R3-EVO evo:22.3X50-EVO evo:22.4R1-EVO evo:23.1R1-EVO junos:21.2R3-S5 junos:21.2X32-D20 junos:21.4R3-S4 junos:22.2R3-S1 junos:22.3R2-S1 junos:22.3R3 junos:22.4R1 junos:23.1R1
PR Number
Synopsis
Category: EVO Netstack Socket Intercept and NetIO libraries
1608401
Lookups command may not work
Product-Group=evo
The Routing subsystems may not be responding to management requests. for example, the show route summary command may not work
Resolved In:
evo:21.3R2-EVO evo:21.4R1-EVO evo:22.1R1-EVO
PR Number
Synopsis
Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1638847
The mustd process crash might be observed with persist-group-inheritance
Product-Group=evo
On all Junos and Junos Evolved platforms configured with persist-group-inheritance, which is enabled by default from 19.4R3 onwards, might lead to mustd process crash in highly scaled configuration.
Resolved In:
evo:22.3X50-EVO evo:22.4R2-EVO evo:22.4R3-EVO evo:23.1R2-EVO evo:23.2R1-EVO junos:20.3X75-D52 junos:20.4R3-S8 junos:21.2R3-S6 junos:21.2X32-D20 junos:21.3R3-S5 junos:21.4R3-S4 junos:22.1R3-S3 junos:22.2R3-S1 junos:22.3R2-S1 junos:22.3R3 junos:22.4R2 junos:22.4R3 junos:23.1R1-S1 junos:23.1R2 junos:23.2R1
1648744
JDI-RCT:M/Mx: While removing VRRP configs and adding them back, mgd process stuck at 100% and router hangs forever.
Product-Group=evo
While removing VRRP configs and adding them back, the mgd process stuck at 100% and the router hangs forever.
Resolved In:
evo:22.2R2-J3-EVO evo:22.2R2-J4-EVO evo:22.2R2-S1-EVO evo:22.2R3-EVO evo:22.3R1-EVO evo:22.3R3-EVO junos:21.2R3-S6 junos:21.2X32-D20 junos:21.3R3-S5 junos:21.4R3-S4 junos:22.1R3-S4 junos:22.2R2-S1 junos:22.2R3 junos:22.3R1
1693630
In JUNOS EVO "show | display inheritance" does not work correctly for LSPs with whitespace in the name
Product-Group=evo
An LSP with whitespace in the name does not display correctly when viewing the configuration using 'show | display inheritance'
Resolved In:
evo:22.2R3-S2-EVO evo:22.3R2-S2-EVO evo:22.3X50-EVO evo:22.4R1-S2-EVO evo:22.4R2-EVO evo:22.4R3-EVO evo:23.1R1-EVO junos:21.2R3-S6 junos:21.2X32-D20 junos:21.4R3-S5 junos:22.1R3-S4 junos:22.2R3-S2 junos:22.3R2-S2 junos:22.3R3-S1 junos:22.4R1-S2 junos:22.4R2 junos:22.4R3 junos:23.1R1
1730336
The rpd crashes and the commit operation fails while pushing a large configuration with the "extend-size" knob enabled
Product-Group=evo
On all Junos platforms, when the 'extend-size' knob is configured and a scaled configuration is committed, the rpd daemon crash is seen and the commit operation fails.
Resolved In:
evo:22.2R3-S1-EVO evo:22.3R2-S2-EVO evo:22.3X50-EVO evo:22.4R3-EVO evo:23.1R1-S1-EVO evo:23.1R2-EVO evo:23.2R1-EVO evo:23.2R2-EVO evo:23.3R1-EVO junos:20.3X75-D52 junos:21.2R3-S6 junos:21.2X32-D20 junos:21.4R3-S4 junos:22.1R3-S4 junos:22.2R3-S1 junos:22.2R3-S2 junos:22.3R2-S1 junos:22.3R2-S2 junos:22.3R3-S1 junos:22.4R2-S1 junos:22.4R3 junos:23.1R1-S1 junos:23.1R2 junos:23.2R1 junos:23.2R2 junos:23.3R1
Modification History
First publication 2023-09-08
21.2R3-S6-EVO: Software Release Notification for JUNOS Evolved Software