Alert Type
SRN - Software Release Notification
Risk
Risk Description
Low/Notification
Software Release Notification
Impact
Impact Description
Low/Notification
Software Release Notification
Product Affected
ACX PTX QFX
Alert Description
Junos Software Service Release version 21.4R3-S7-EVO is now available for download from the Junos software download site
Download Junos Software Service Release:
Go to
Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select
Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as need and follow the prompts
Solution
Junos Software service Release version 21.4R3-S7-EVO is now available.
21.4R3-S7-EVO - List of Fixed issues
PR Number
Synopsis
Category: MPC Fusion SW
1777534
On MX and EX platform replacing the line-cards may trigger FPC to be offlined due to unreachable destinations
Product-Group=evo
On Junos MX and EX9200 platforms when replacing MPC2E-NG and EX9200-40XS with MPC3E-NG, SCBE3 and EX9200-MPC cards, inserting the new MPC may cause new and other line cards to go offline due to unreachable destinations. This happens due to some registers on the fabric card is not properly updated once the fabric channel bonding has changed and impacts the traffic.
PR Number
Synopsis
Category: BBE CPM/UPM
1659175
JSD crash is seen during cBNG container startup
Product-Group=evo
On MX Platforms in BNG scenario, the telemetry collector connections will terminate when JSD (Juniper Extension Toolkit (JET) service process) crashes, creating a core dump due to startup of a cBNG (Containerized Broadband Network Gateway) container or when JSD is restarted from the CLI in a cBNG container. It is rare timing issue.
PR Number
Synopsis
Category: Border Gateway Protocol
1448092
unexpected delay while running "show route advertising-protocol bgp" for an unconfigured peer in scaled vrf
Product-Group=evo
When we have a large route volume to iterate/display, the show route advertising-protocol bgp takes more time to return for an unconfigured peer.
1761627
Increase in task memory observed on 'clear validation database'
Product-Group=evo
On all Junos and Junos Evolved platforms, when routing-options session validation is configured, and BGP is configured, task memory usage increases in every iteration on executing 'clear validation database' command.
PR Number
Synopsis
Category: Track PRs in BGP BMP area & is part of BGP inside RPD.
1770976
Routes getting stuck in hidden state forever in BMP scenario
Product-Group=evo
On all Junos and Junos Evolved platforms where BMP (BGP Monitoring Protocol) is configured, the routes are not removed from the RIB (Routing Information Base) even when the damping timer expires and they are stuck in the hidden
PR Number
Synopsis
Category: EVO Layer-2 switching for BCM XGS Platforms
1784726
VSTP is not converging & causing a loop when IRB interfaces are configured on a VSTP enabled VLAN
Product-Group=evo
On Junos OS Evolved platforms, VSTP (VLAN Spanning Tree Protocol) is not converging & causing a loop when IRB (Integrated Routing and Bridging) interfaces are configured on a VSTP enabled VLAN. The issue happens for the input ifl index value with the L2 ifl index being overwritten by the IRB ifl index.
PR Number
Synopsis
Category: PFE L2 forwarding features on BT based platforms
1745528
Untagged control traffic on L3 interface will be dropped on Junos OS Evolved based PTX platforms
Product-Group=evo
On all Junos OS Evolved based PTX platforms with physical interface/LAG (Link Aggregation Group) interface in L3 mode, the untagged control traffic on L3 interface gets dropped if lport value of L3 interface matches with lport value of L2 aggregated ethernet (AE) interface in trunk mode.
PR Number
Synopsis
Category: Express BT PFE L3 Features
1789679
PTX10K EVO platforms with high multicast route changes can trigger multicast traffic queue drops
Product-Group=evo
Due to pfe internal logging processing time of multicast next-hop changes, multicast route convergence might take longer on one FPC versus other FPCs in the same system. This can cause multicast traffic amplification resulting in multicast traffic queue drops. The condition is transient and may last for sub-seconds to seconds.
PR Number
Synopsis
Category: EVO L2 Control Plane PRs
1737938
On QFX Series platforms running Junos OS Evolved that support EVPN, on which EVPN feature support was introduced with MAC-VRF EVPN instances, you configure EVPN-VXLAN features using MAC-VRF instances only
Product-Group=evo
On QFX Series platforms running Junos OS Evolved that support EVPN, on which EVPN feature support was introduced with MAC-VRF EVPN instances, you configure EVPN-VXLAN features using MAC-VRF instances only
PR Number
Synopsis
Category: EVO RPD agent PRs
1792740
Observed "MCNHMBB index availability" alarm when system is subjected to heavy PIM join/prune churn
Product-Group=evo
On Junos OS Evolved platforms, During heavy multicast route changes or PIM join/prune churn, MCNHMBB (Multicast NextHop Make Before Break) index space is running low and will flow control back to RPD (Routing Protocol Daemon). This is not a bug, a small enhancement.
PR Number
Synopsis
Category: mgd, ddl, odl infra issues
1741284
hasGlobalIP: Attribute GLOBALIPOWNER doesn't exist is reported on Master RE when commit synce to Backup RE.
Product-Group=evo
22.4R2-EVO and earlier, 22.4R2 and earlier
PR Number
Synopsis
Category: EVPN control plane issues
1717016
Interface related commits causing RPD CPU spike
Product-Group=evo
On Junos and Junos OS Evolved platforms, any interface configuration change may cause RPD (routing protocol daemon) CPU spike on scaled configuration.
1722102
L2alm sends IPv6 NS with IRB link local address even though target IP is global address
Product-Group=evo
On Junos and Junos Evolved platforms configured with EVPN-VXLAN, EVPN-MPLS, it is observed that L2alm sends IPv6 NS(Neighbor Solicitation) with link local address even through target IP is global address.
PR Number
Synopsis
Category: EVPN Layer-2 Forwarding
1691029
Packet Loss seen on the EVPN-VXLAN spine router
Product-Group=evo
On all platforms supporting MAC_VRF in a scaled config when continous delete and rollback were performed the OSPF and BFD will go down leading to packet drop.
1700196
Traffic drop would be observed due to the VTEP tunnels not being established in the EVPN-VxLAN scenario
Product-Group=evo
On Junos and Junos Evolved QFX platforms, in the Ethernet Virtual Private Network-Virtual extensible LAN (EVPN-VxLAN) scenario Virtual Tunnel End Point (VTEP) tunnels are not established due to the timing of events and show up as next-hop set to zero which causes the traffic loss. It is a rare case and this issue will be observed in a scaling scenario or multiple mac-vrf routing-instances.
PR Number
Synopsis
Category: ISIS routing protocol
1749850
The device will not be reachable over the loopback interface for the IS-IS nodes even though the neighborship may exist
Product-Group=evo
On all Junos and Junos OS Evolved platforms, multiple simultaneous Command Line Interface (CLI) sessions will lead to high Management Daemon (mgd) CPU utilization, impacting the device's reachability over the loopback interface from IS-IS nodes.
1759728
The rpd process crashes after clearing ISIS database or restarting the rpd process
Product-Group=evo
On all Junos and Junos Evolved platforms, in scenarios where segment routing (SR) is configured, prefix-segment is used in a clause of policy associated to Intermediate System to Intermediate System (ISIS) protocol and Label Distribution Protocol (LDP) stitching in use, the routing process daemon (rpd) process will try to access freed memory after clearing ISIS database or restarting routing process, which leads the rpd process to crash.
1782887
Traffic blackhole due to Flex-algo not removing stale entries from ISIS database
Product-Group=evo
On all Junos and Junos Evolved platforms, in an ISIS scenario using Flex-algo , the system does not remove the stale (outdated) entries from the ISIS database causes traffic blackholing. This issue could lead to some traffic loss, as the routing information stored in the ISIS database does not get properly updated.
PR Number
Synopsis
Category: Layer 2 Control Module
1770053
xSTP configured interface will remains in discarding state
Product-Group=evo
On all Junos and Junos OS Evolved Platforms, when an interface is added inside RSTP (Rapid Spanning Tree Protocol), VSTP (VLAN Spanning Tree Protocol), MSTP (Multiple Spanning Tree Protocol) or STP (Spanning Tree Protocol), because of STP port creation fail from l2cpd (Layer 2 control protocol daemon), port will remains in discarding state. This leads to traffic impact.
PR Number
Synopsis
Category: Layer2 forwarding on EX/NTF/PTX/QFX
1666700
RLI-47857: Traffic loss seen with CRB config after adding RI protocol evpn extended-vni-list
Product-Group=evo
Traffic loss seen with CRB config after adding RI protocol evpn extended-vni-list. Issue is observed because in EVO SVTEP ifl is not deleted when ifl index is zero.
1772424
Connectivity between static and LDP signaled pseudowires broken in VPLS after upgrade and results in VPLS traffic drop
Product-Group=evo
On all Junos and Junos OS Evovled platforms, when there is a upgrade and also when one mesh group of routing instance is substring of other, the connection between static and LDP (Label Distribution Protocol) signaled psuedowires is broken will lead to traffic drop.
1776991
ARP resolution issues will be observed in the H-VPLS environment
Product-Group=evo
On Junos and Junos Evolved platforms, traffic impact will be observed due to ARP (Address Resolution Protocol) resolution issues when multiple mesh-group is configured under the same routing-instance and the name of each mesh-group is not unique i.e. substring of another mesh-group in the H-VPLS (Hierarchical Virtual Private LAN Service) environment.
1790064
The l2ald process will crash, with rapid configuration changes followed by rpd and l2ald restart process
Product-Group=evo
On all Junos and Junos OS Evolved platforms with EVPN -VXLAN and high scaling configuration, rapid configuration changes followed by restart of rpd and l2ald will result in l2ald process crash and traffic drop will be observed.
PR Number
Synopsis
Category: lacp protocol
1773827
The LAG with member interface enabled with 'force-up' can flap after switchover
Product-Group=evo
On Junos and Junos Evolved QFX/EX platforms if the member link of an AE (Aggregation Ethernet) interface is configured with force-up, the LAG (Link Aggregation Group) can flap after switchover through GRES (Graceful Routing Engine Switchover) or during ISSU (In Service Software Upgrade). Traffic that goes through the LAG will be dropped when the interface flaps.
PR Number
Synopsis
Category: Issues related to Junos licensing infrastructure
1755735
EX4650 flex license: After expiry the number of licenses installed increases to 1000
Product-Group=evo
Ensure the License Key has the correct capacity value for non-capacity features.
1759618
License-service crash is seen on Junos OS Evolved platforms
Product-Group=evo
On Junos OS Evolved platforms, when license with unknown feature ID/platform reserved feature ID is added via configuration set system license keys key and then if License-service is restarted or system is rebooted or software upgrade is done then license service crashes and crash files are seen. This is a non service impacting issue.
PR Number
Synopsis
Category: For multicast snooping on MX
1711153
A crash can be observed for 'mcsnoopd' process when the VLAN name for igmp-snooping has certain characters
Product-Group=evo
On all Junos and Junos Evolved platforms, a crash can be observed for the 'mcsnoopd' process. This issue is seen when the devices support the VLAN (Virtual Local Area Network) style of igmp-snooping (internet group messaging protocol configuration (set protocols igmp-snooping vlan ) and the VLAN name begins with the word all and has certain other characters. The workaround is not to enable the snooping for such VLANs.
PR Number
Synopsis
Category: OSPF routing protocol
1774715
OSPF route flap might be observed
Product-Group=evo
On all Junos and Junos OS Evolved platforms OSPF (Open Shortest Path First) route flaps can be observed which will cause a traffic drop. This is a rare timing issue happening after an OSPF adjacency flap.
PR Number
Synopsis
Category: Protocol Independant Multicast
1792886
The rpd crash is observed when PIM SSM mode with RPF-Vector and MoFRR is configured
Product-Group=evo
On Junos and Junos Evolved platforms , when PIM SSM (PIM Source-Specific Multicast) with RPF (Reverse Path Forwarding)-Vector and MoFRR (Multicast-only fast reroute) is configured , rpd crash if the device receives PIM Prune message for (S, G) state with RPF vector TLV. interface is freed for the (S, G) from the outgoing interface list i.e. RPF-Vector TLV (Type, Length, and Value) having (S, G) is getting freed but that same (S, G) is still used by MoFRR. The issue happens when MoFRR Backup upstream interface is also listed at the outgoing interface list for the (S, G)
PR Number
Synopsis
Category: RPD Next-hop issues including indirect, CNH, and MCNH
1747992
The memory consumption increases due to memory leak
Product-Group=evo
On all Junos and Junos OS Evolved platforms, a continuous memory leak is observed due to an allocated socket memory not being freed. This is a minor leak but can lead to significant memory usage on highly scaled setups leading to performance and functional impact including system crash beyond a certain point.
PR Number
Synopsis
Category: RPD route tables, resolver, routing instances, static routes
1687884
The traffic drop will be observed for the static route after VRRP failover when VRRP VIP is set as next-hop for that static route
Product-Group=evo
On all Junos and Junos OS Evolved platforms, the next-hop for a static route does not refresh at PFE (Packet Forwarding Engine) after VRRP (Virtual Router Redundancy Protocol) failover when VRRP VIP (Virtual-IP) address is used as the next-hop for the static route.
1761232
Memory spike will be observed on the system with BFD enabled
Product-Group=evo
On all Junos and Junos OS Evolved platforms, when Bidirectional Forwarding Detection (BFD) is enabled with any routing protocols (ex - IS-IS/OSPF), memory spikes will be observed in the system.
PR Number
Synopsis
Category: PTX10K specific platform PRs
1766097
PTX10008: When NSR Enabled and FMBB Knobs are configured and if SIB is Offline/Online casue resiliencyd core
Product-Group=evo
PTX10008: When NSR Enabled and FMBB Knobs are configured and if SIB is Offline/Online casue resiliencyd core
PR Number
Synopsis
Category: SNMP Infrastructure (snmpd, mib2d)
1691986
Consistent high CPU usage is seen on the device post reboot
Product-Group=evo
On all Junos and Junos Evolved platforms consistent high CPU usage in snmpd immediately after reboot.
PR Number
Synopsis
Category: Authentication, Authorization, Accounting, PAM (RADIUS/tacplus)
1797496
Config login class with allow/deny-configuration-regexps not working as expected with Routing-instances
Product-Group=evo
Config login class with allow/deny-configuration-regexps not working as expected with Routing-instances
PR Number
Synopsis
Category: Ephemeral Database
1751141
Load replace via XML NetConf will not work
Product-Group=evo
On all Junos and Junos OS Evolved platforms, the load replace operation through XML NetConf will fail.
PR Number
Synopsis
Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1794536
The device is went into config locked state due to stale mgd
Product-Group=evo
The device is went into config locked state due to stale mgd. For netconf sessions with , if ungraceful exit happens, the lock is not released. There is auto cleanup supported for such cases, But it is not triggered under problem conditions as faced in this PR. This leads to device remain in locked state due to stale entry. "request system logout pid " can be used for cleanup and to recover from this state.
21.4R3-S7-EVO - List of Known issues
PR Number
Synopsis
Category: Express BT PFE L3 Features
1777759
LAG interfaces will take longer than usual to come up in a scaled scenario with ALB
Product-Group=evo
On PTX10001, PTX10004, PTX10008 and PTX10016 platforms, if Adaptive load balancing (ALB) is configured on LAG interface, the LAG interfaces will take longer than usual to be up if they are all enabled in the same commit. LAG interfaces get stuck in 'attached' state. This issue happens in a scaled Link Aggregation Group (LAG) (~65 ae*) scenario.
Resolved In:
evo:22.2R3-S4-EVO evo:22.3R3-S3-EVO evo:22.3X80-D44-EVO evo:23.2R2-S1-EVO evo:23.4R1-S2-EVO evo:23.4R2-EVO evo:24.2R1-EVO evo:24.3R1-EVO junos:24.2R2
1790095
pfestatsd process may failed to restart
Product-Group=evo
pfestatsd process was running out of file descriptors when there are 16 FPCs in the system as the number of concurrent connections exceeded 1024
Resolved In:
evo:22.2R3-S4-EVO evo:22.3R3-S3-EVO evo:22.3X80-D43-EVO evo:22.3X80-D44-EVO evo:23.2R2-S1-EVO evo:23.4R1-S2-EVO evo:23.4R2-EVO evo:24.2R1-EVO
PR Number
Synopsis
Category: BX PFE firewall issues
1772149
Balerion-FT:Firewall: aftmand-bx cores continuously at JexprHandleFilter:: updatePfeInst, when attaching filter which has 5-tuples+FC+DP+TTL+Fragment+ifl matches
Product-Group=evo
If a filter does not compile due to an unsupported match combination (i.e. the set of matches configured in the filter is not supported by hardware), attaching this filter to an interface will cause aftmand-bx to crash.
Resolved In:
evo:22.2R3-S4-EVO evo:22.3R3-S3-EVO evo:22.3X50-EVO evo:22.3X80-D44-EVO evo:23.2R2-S1-EVO evo:23.4R1-EVO evo:23.4R1-S2-EVO evo:23.4R2-EVO evo:24.1R1-EVO
PR Number
Synopsis
Category: Dynamic rendering infrastructure
1745615
Telemetry data is not exported in an IS-IS scaled Segment Routing scenario
Product-Group=evo
On all Junos and Junos OS Evolved platforms configured with SR-ISIS and with gRPC/gNMI telemetry, subscription to the path: "/junos/services/segment-routing/sid/usage/" will not work and the output could not be proper. The issue could happen only in scaled configuration (Approximately, 4000 or more per-sid ingress sensors and 4000 or more IPv4/IPv6 per-sid egress sensors are configured).
Resolved In:
evo:24.3R1-EVO junos:23.4R1-S1 junos:23.4R1-S2 junos:23.4R2 junos:24.2R1
PR Number
Synopsis
Category: EVO ARP related PRs
1776871
Functionality provided by arp/ndp publish argument doesn't work on all Junos OS Evolved platforms
Product-Group=evo
Functionality provided by publish argument for static arp and static ndp configuration is not working on all Junos OS Evolved platforms.
Resolved In:
evo:23.2R2-S1-EVO evo:23.4R1-S2-EVO evo:23.4R2-EVO evo:24.1R1-EVO evo:24.2R1-EVO
PR Number
Synopsis
Category: EVO linux defects & enhancement requests
1698495
Junos OS Evolved: libslax: Multiple vulnerabilities in libslax resolved
Product-Group=evo
Multiple vulnerabilities resolved in libslax 0.22.1. Please refer to https://supportportal.juniper.net/
JSA79102
[juniper.net]
for more information.
Resolved In:
evo:22.2R3-S4-EVO evo:22.2X3-EVO evo:22.3X80-D41-EVO evo:22.3X80-D42-EVO evo:22.4R2-EVO evo:22.4R3-EVO evo:23.1R1-EVO
PR Number
Synopsis
Category: EVO category to hold IPv6 Neighbor Discovery Protocol and re
1802833
The egress traffic loss occurs when IPv6 Router Solicitation (RS) packets are processed just after interface flap(down/up)
Product-Group=evo
On all Junos Evolved platforms, the the egress traffic loss occurs when IPv6 Router Solicitation (RS) packets are processed just after interface flap(down/up).
Resolved In:
evo:22.2R3-S4-EVO evo:22.3R3-S3-EVO evo:22.4R3-S2-EVO evo:23.2R2-J2-EVO evo:23.2R2-S1-EVO evo:23.4R1-S2-EVO evo:23.4R2-EVO evo:24.2R1-EVO evo:24.3R1-EVO
PR Number
Synopsis
Category: Express PFE MPLS for EVO platforms
1765107
Unknown sensors are added in PFE on all Junos OS Evolved platforms
Product-Group=evo
On all Junos OS Evolved platforms, any client (in this case it was LDP), a route (with a sensor attached) is added and deleted immediately. This is a timing issue and easily reproducible.
Resolved In:
evo:22.2R3-S4-EVO evo:22.3R3-S3-EVO evo:22.3X50-EVO evo:22.3X80-D40-EVO evo:23.2R2-EVO evo:23.4R1-EVO evo:23.4R2-EVO evo:24.1R1-EVO
PR Number
Synopsis
Category: SNMP, mib2d issues
1788308
[Junos OS Evolved] SNMP cold start trap is not sent out to external server upon system reboot
Product-Group=evo
On Junos OS Evolved platforms, SNMP cold start trap is observed on console log upon system reboot, but it is not sent out to external server.
Resolved In:
evo:24.3R1-EVO
PR Number
Synopsis
Category: Multiprotocol Label Switching
1719162
MPLS LSP stats will not increment post the rpd restart
Product-Group=evo
On all Junos and Junos OS Evolved platforms post rpd restart using cmd "restart routing immediately" mpls lsp statistics will not work.
Resolved In:
evo:22.1R3-S6-EVO evo:22.2R3-S4-EVO evo:22.3R3-S3-EVO evo:22.3X50-EVO evo:22.3X80-D36-EVO evo:22.3X80-D37-EVO evo:23.2R2-EVO evo:23.3R1-EVO evo:23.4R1-EVO
PR Number
Synopsis
Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1718063
After deleting commit scripts with transient changes, the changes do not take effect
Product-Group=evo
On Junos OS Evolved ACX7100-32C / ACX7100-48L / ACX7509 / PTX10001-36MR / PTX10003 / PTX10004 / PTX10008 / PTX10016 platforms, when a commit script with transient configurations is deleted, daemon does not see the change after commit.
Resolved In:
1769911
Netconf: File copy with password less authentication is failing with rpc request
Product-Group=evo
Netconf: File copy with password less authentication is failing with rpc request
Resolved In:
1772201
unexpected commit error - error: VLAN-ID must be specified on tagged ethernet interfaces
Product-Group=evo
unexpected commit error like 'error: VLAN-ID must be specified on tagged ethernet interfaces', due to 'commit check' reset internal flag incorrectly after load overide configuration in rare condition.
Resolved In:
Modification History
First publication 2024-05-22
21.4R3-S7-EVO: Software Release Notification for Junos Evolved Software