Alert Type
SRN - Software Release Notification
Risk
Risk Description
Low/Notification
Software Release Notification
Impact
Impact Description
Low/Notification
Software Release Notification
Product Affected
ACX PTX QFX platforms running Junos Evolved software
Alert Description
Junos Software Service Release version 23.2R1-S1-EVO is now available for download from the Junos software download site
Download Junos Software Service Release:
Go to
Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select
Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as need and follow the prompts
Solution
Junos Evolved Software service Release version 23.2R1-S1-EVO is now available.
23.2R1-S1-EVO - List of Fixed issues
PR Number
Synopsis
Category: Border Gateway Protocol
1709837
Junos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481)
Product-Group=evo
An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). Please refer to https://supportportal.juniper.net/
JSA72510
[juniper.net]
for more information.
PR Number
Synopsis
Category: EVO Layer-2 switching for BCM XGS Platforms
1741712
Traffic loss would be seen for host generated traffic from QFX5130 and QFX5700 platforms
Product-Group=evo
On QFX5130 and QFX5700 platforms on LAG(Link Aggregation Group) interfaces with flexible-vlan-tagging enabled and extended-vlan-bridge and native-vlan-id configuration, traffic towards host would be sent out untagged to both native VLAN and non-native VLAN.
PR Number
Synopsis
Category: MX304 line card platform software
1739718
Incomplete FPC Firmware details will be displayed
Product-Group=evo
On MX304 and MX platforms with MPC11 and LC9600, the CLI command 'show system firmware' may sometimes not display all the firmware details of FPC components. This prevents the FPC firmware components from being upgraded to the latest version when the firmware upgrade is performed.
PR Number
Synopsis
Category: DNX platform MPLS FRR features
1739112
[Error] BrcmPlusNhMpls: Tunnel create failed for NH: *. BrcmPlusNhMplsTunDataShrPtr BrcmPlusNhMplsTunnel:: mplsHwCreate()
Product-Group=evo
Due a the SW bug, the local LIF which is responsible for HW resource allocation was not getting freed properly, causing resource exhaustion and leading to Tunnel creation failure. Below logs may appear : [Error] BrcmPlusNhMpls: Tunnel create failed for NH: *. BrcmPlusNhMplsTunDataShrPtr BrcmPlusNhMplsTunnel:: mplsHwCreate() [Error] BrcmPlusNh: status_t BrcmNhRedUnilist:: configProtectionInHw(const BrcmParamsRedUnilistNhPtr&) Failed to allocate protection shadow FECs for unilist NH * [Error] BrcmPlusNh: Failed configuring protection in HW unilist NH
PR Number
Synopsis
Category: Distributor related issues
1719739
The evo-aftmand-bt process may restart when an app exit
Product-Group=evo
On all Junos Evolved platforms, when an app exits (like app restart, node restart, ..), the evo-aftmand-bt process may restart unexpectedly.
PR Number
Synopsis
Category: management ethernet related issues - mgmt-ethd daemon
1740836
On Junos Evolved platforms during boot, management interface (re0:mgmt-0) do not get an IP address from DHCP server intermittently
Product-Group=evo
During a vJunosEvolved instance boot, Ubuntu given dhclient (part of Junos Evolved) will attempt to acquire a DHCP (Dynamic Host Control Protocol) lease and fail, leaving the instance with no IP address and making it unreachable. This is due to a race condition at dhclient's read socket which is prematurely closed without reading DHCPOFFER packet.
PR Number
Synopsis
Category: software upgrade infra issues
1731877
Auto-sw-sync doesn't trigger upgrade/restart of routing engine
Product-Group=evo
On Junos Evolved PTX10008 and PTX10016 platforms, on releases after 21.2R1-EVO, on enabling auto-sw-sync with no user groups configuration, routing engine 1 (RE1) after joining the cluster, can not sync the versions present in master RE0.
1739286
Installation of TP package on one RE and using auto-sync to add another RE into the cluster may result in app not starting on the incoming RE
Product-Group=evo
Setup is a dual-RE system where one RE is currently out of the cluster and auto-sw-sync is enabled on the running master RE. If a third-party package is now installed on the master RE and the other RE is later inserted into the system, auto-sw-sync is triggered. As part of the auto-sw-sync, the other RE may need to be rebooted to bring the current version on that RE in sync with the master. During reboot, we may occasionally hit a race condition where sysman starts first on the backup RE and tries to start third-party applications even before they get installed on the incoming RE. This may particularly be a problem if the backup RE is switched over to be the master.
PR Number
Synopsis
Category: Configd, ffp issues
1743038
Commit confirm and commit race condition crashes the firewall functionality
Product-Group=evo
On dual-RE (Routing Engine) Junos Evolved platforms, when the commit is executed during the commit confirm timeout window, it causes the firewalld to stop working.
PR Number
Synopsis
Category: mgd, ddl, odl infra issues
1752374
Subsequent commits hang will be seen, when transfer-on-commit fails
Product-Group=evo
On all Junos Evolved platforms, When transfer-on-commit is configured and it fails as the destination is unreachable or invalid, commit lock taken by automatic rollback commit is not released. Due to this, subsequent commits result in a hung state.
PR Number
Synopsis
Category: EVPN Layer-2 Forwarding
1734091
Traffic drop is observed in EVPN-VXLAN CRB scenario
Product-Group=evo
On all Junos Evolved platforms, in EVPN-VXLAN (Ethernet VPN-Virtual Extensible LAN) CRB (centrally-routed bridging) scenario, post reboot of chassis or on clearing BGP (Border Gateway Protocol) neighbor on spine nodes ARP (Address Resolution Protocol) entries which are remotely learned when IRB (integrated routing and bridging) ifl is down and when it comes up, these entries are present in the ARP table but the corresponding destination routes are missing in the forwarding table. Due to which traffic drop is observed.
PR Number
Synopsis
Category: Express PFE CoS Features
1735087
Incorrect queue-counters-trans-bytes-rate ('0')observed while verifying traffic rate for two color policer for AE.
Product-Group=evo
With a two-color policer configured on Aggregate Ethernet interfaces, the "queue-counters-trans-bytes-rate" counter may display an incorrect value.
PR Number
Synopsis
Category: Express PFE FW Features
1751076
The default lo0 firewall filter is not used for traffic sent from a Routing Instance to a host when there is no lo0 configured under the RI
Product-Group=evo
The default lo0 firewall filter is not used for traffic sent from a Routing Instance to a host when there is no lo0 configured under the RI
PR Number
Synopsis
Category: Software Junos/JunosEvolved lab product
1731923
vJunosEvolved - Removing the external PFE and RPIO bridging
Product-Group=evo
This is a modification of PFE bridges in vJunosEvolved lab product which was released in 23.1R1.8. As a change, moving these bridges internally to EVO and no need to mention outside.
PR Number
Synopsis
Category: Layer2 forwarding on EX/NTF/PTX/QFX
1743282
The l2ald crashes when there is recursive deletion of IFBD or when BGP neighborship is cleared in EVPN-VXLAN multi-homed configuration
Product-Group=evo
On all Junos and Junos OS Evolved platforms, in a rare scenario, due to timing issue, the l2ald (Layer 2 Address Learning Daemon) crashes and traffic is being blackholed due to recursive deletion of IFBD (Interface Family Bridge Domain) or when BGP (Border Gateway Protocol) neighborship is cleared when EVPN (Ethernet Virtual Private Network) - VXLAN (Virtual Extensible Local Area Network) with multi-homed is configured.
1754493
"set services evpn global-parameters virtual-gateway v6-mac" is broken
Product-Group=evo
When "global-parameters virtual-gateway v4-mac" or "global-parameters virtual-gateway v6-mac" independently set, the commit fails. This PR address this issue.
PR Number
Synopsis
Category: PRs for LC1202 Platform and Interface
1734235
PTP will get stuck in acquiring state which leads to improper time synchronization after system reboot
Product-Group=evo
On Junos OS Evolved PTX10004/PTX10008/PTX10016/PTX10K-LC1201/PTX10K-LC1202/JNP10K-LC1202 platforms with SyncE (Synchronous Ethernet) and PTP (Precision Time Protocol) after system reboot, SyncE ref will not get locked and the PTP will get stuck in acquiring state and time synchronization will not be proper.
PR Number
Synopsis
Category: RPD route tables, resolver, routing instances, static routes
1742147
Memory leak observed when reconfiguring the flow routes
Product-Group=evo
On all Junos and Junos OS Evolved platforms, if the nexthop of a flow route is the same as it was before when reconfiguring flow routes, memory leak occurs. High memory use of routing process daemon(rpd) is seen as a result of this leak. A kernel out of memory message is observed which results BGP flap.
PR Number
Synopsis
Category: PTX10K specific platform PRs
1720276
Application failure would occur on Routing Engine switchover
Product-Group=evo
On Junos OS Evolved platforms, application failure would be observed if it exits without cleaning up the zookeeper contents. This is a rare issue, however can have potential impact depending on the application which fails.
PR Number
Synopsis
Category: PTX10K Timing/Sync-E issues tracking
1725260
PTX EVO - esmc transmit interfaces may not be listed in "show synchronous-ethernet esmc transmit" CLI with generating clksyncd core by replacing "interface name" with "replace pattern" CLI
Product-Group=evo
On PTX Junos Evolved platforms, esmc transmit interfaces may not be listed in "show synchronous-ethernet esmc transmit" CLI with generating clksyncd core by replacing "interface name".
PR Number
Synopsis
Category: ZT/YT pfe firewall software
1743930
Traffic drop is observed after the addition or removal of the "filter-specific" knob under the policer
Product-Group=evo
On MX platforms with MPC10, MPC11 and JNP10K-LC9600 linecards, when both regular & hierarchical/tricolor policer is configured on the logical interface (ifl), after the addition or removal of "filter-specific" knob under this combination of policer traffic drop is observed.
PR Number
Synopsis
Category: Ephemeral Database
1732379
MGD core found @ db_commit_ephemeral xml_commit jsop_commit
Product-Group=evo
When MGD opens the ephemeral database in the merge view. Upon completion, if the merge_view is closed, and the candidate ephemeral database is reopened. If MGD can not find the underlying database the MGD process dumps its core.
PR Number
Synopsis
Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1740289
The 'load replace' operation might result in mustd and mgd crash
Product-Group=evo
On Junos and Junos Evolved platforms with apply-group configured, mustd and mgd crash might be observed when the 'load replace' operation is performed due to which all the apply-groups will get deleted internally, and respective hierarchies will not be notified.
PR Number
Synopsis
Category: Issues related to XML, JSON handling
1736286
OpenConfig data obtained with gNMI GetRequest in json format displays module prefix
Product-Group=evo
When OpenConfig data is queried using using gnmi GetRequest in json format, appropriate module prefixes will get displayed for the first container object from the respective module.
23.2R1-S1-EVO - List of Known issues
PR Number
Synopsis
Category: DNX SRv6 PFE
1726481
Traffic failures in micro-sid with scale of 2k VRFs
Product-Group=evo
Trigger: In the scaled setup with SRv6 micro sid for L3VPN VRFs (~2K) are enabled in single commit, few initial VRF may experience traffic outage. Workaround: Deactivating and re-activating only the failed VRFs will resolve the problem.
Resolved In:
evo:23.4R1-EVO
PR Number
Synopsis
Category: AF interface in Node Virtualization
1724734
Offline and online of GNF fabric planes impacts traffic forwarding
Product-Group=evo
In Junos node slicing scenario, offline of fabric planes causes the fabric probe to stop. For AF(Abstracted Fabric) interfaces, which are logical WAN interfaces over fabric for the GNFs to communicate, the fabric probe stop is used as a trigger to disable PFE so that the AF liveness mask is maintained at value before the probe stopped. This results in the subsequent online of planes to be not processed resulting in the ping drop and traffic impact.
Resolved In:
evo:22.4R3-EVO evo:23.1R2-EVO evo:23.2R2-EVO evo:23.3R1-EVO junos:22.4R2 junos:22.4R3 junos:23.1R2 junos:23.2R1-S1 junos:23.2R2
PR Number
Synopsis
Category: EVPN Layer-2 Forwarding
1743529
ARP/FIB are added even if IRB in EVPN is disabled
Product-Group=evo
On all Junos and Junos Evolved platforms, address resolution protocol (ARP) entry is added via evpn even if the corresponding integrated routing and bridging (IRB) is disabled. Even though an alternative path exists via other interface, the path will not be used and the packet will be dropped.
Resolved In:
evo:22.4R3-EVO evo:23.2R2-EVO evo:23.3R1-EVO evo:23.4R1-EVO junos:22.4R3 junos:23.2R2 junos:23.3R1 junos:23.4R1
PR Number
Synopsis
Category: Layer2 forwarding on EX/NTF/PTX/QFX
1733543
Traffic loss is seen when "lacp force-up" knob is configured
Product-Group=evo
On all Junos and Junos OS Evolved platforms, traffic destined to the core is getting dropped when "lacp force-up" knob is configured on ae interface under EVPN-VXLAN (Ethernet VPN-Virtual Extensible LAN) scenario.
Resolved In:
evo:22.4R3-EVO evo:23.1R2-EVO evo:23.2R2-EVO evo:23.3R1-EVO evo:23.4R1-EVO junos:22.2R3-S2 junos:22.3R3-S1 junos:22.4R3 junos:23.1R2 junos:23.2R1-S1 junos:23.2R2 junos:23.3R1 junos:23.4R1
PR Number
Synopsis
Category: RPD route tables, resolver, routing instances, static routes
1715599
Inconsistent RPD core found in rt_walk, task_job_run_job_bg, task_scheduler
Product-Group=evo
rpd may generate core when running slow related gribi toby scripts in fusion system. Running same scripts in manually deployed testbed will not trigger rpd core.
Resolved In:
PR Number
Synopsis
Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1745565
The mgd process crash is observed when 'show' is executed from the configuration mode
Product-Group=evo
On all Junos platforms, when 'show' is executed from the configuration mode, a mgd process crash is observed which has no functionality impact.
Resolved In:
evo:21.2R3-S6-EVO evo:22.2R3-S2-EVO evo:22.3R2-S2-EVO evo:22.3R3-S1-EVO evo:22.3X50-EVO evo:22.3X80-D36-EVO evo:22.3X80-D37-EVO evo:22.4R2-S1-EVO evo:22.4R3-EVO evo:23.1R1-S1-EVO evo:23.1R2-EVO evo:23.2R2-EVO evo:23.3R1-EVO evo:23.4R1-EVO junos:20.3X75-D46 junos:20.4R3-S9 junos:21.2R3-S6 junos:21.2X32-D20 junos:22.2R3-S2 junos:22.3R2-S2 junos:22.3R3-S1 junos:22.4R2-S1 junos:22.4R3 junos:23.1R2 junos:23.2R1 junos:23.2R1-S1 junos:23.2R2 junos:23.3R1 junos:23.4R1
Modification History
First publication 2023-09-14
23.2R1-S1-EVO: Software Release Notification for JUNOS Evolved Software