Alert Type
SRN - Software Release Notification
Risk
Risk Description
Low/Notification
Software Release Notification
Impact
Impact Description
Low/Notification
Software Release Notification
Product Affected
ACX PTX QFX running Junos Evolved platforms
Alert Description
Junos Software Service Release version 22.4R3-S2-EVO is now available for download from the Junos software download site
Download Junos Software Service Release:
Go to
Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select
Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as need and follow the prompts
Solution
Junos Software service Release version 22.4R3-S2-EVO is now available.
22.4R3-S2-EVO - List of Fixed issues
PR Number
Synopsis
Category: MPC Fusion SW
1777534
On MX and EX platform replacing the line-cards may trigger FPC to be offlined due to unreachable destinations
Product-Group=evo
On Junos MX and EX9200 platforms when replacing MPC2E-NG and EX9200-40XS with MPC3E-NG, SCBE3 and EX9200-MPC cards, inserting the new MPC may cause new and other line cards to go offline due to unreachable destinations. This happens due to some registers on the fabric card is not properly updated once the fabric channel bonding has changed and impacts the traffic.
PR Number
Synopsis
Category: EVO platform software
1799275
PTX10001-36MR enters booting loop when a system reboot or software upgrade initiated reboot is performed
Product-Group=evo
PTX10001-36MR enters booting loop when the system reboots as part of system reboot or software upgrade procedure. A rare timing issue prevents the initialisation of internal component causing the issue.
PR Number
Synopsis
Category: Track PRs in BGP BMP area & is part of BGP inside RPD.
1796530
High CPU utilization due to BMP to be running with the longest and highest run count
Product-Group=evo
In a rare situation, BMP might falls into a loop processing rib-in RM update messages but none of message being sent out. It can hog CPU for long time until the BMP station state is bounced. Since BMP task has low priority, it will yield CPU if there are other tasks jump in. So BMP will only hog CPU when system is idle and won't block other important tasks.
PR Number
Synopsis
Category: Track PRs in BGP Flow Spec area & is part of BGP inside RPD.
1740257
The inetflow6 routes are not installed on firewall filter table using BGP FlowSpec
Product-Group=evo
On all Junos and Junos OS Evolved platforms configured with BGP FlowSpec, ipv6 routes are installed in flow route table but not in firewall filter table. FlowSpec routes are blocked and dropped leading to traffic disruption. This is especially seen when BGP UPDATE Message does not include "Filter: Packet Length filter" within "FLOW_SPEC_NLRI" from BGP flowspec server thereby inetflow6 routes do not have "Action(s)"
PR Number
Synopsis
Category: EVO L3 routing for BCM XGS Platforms
1788988
On Junos Evolved QFX platforms IPv6 traffic forwarding failure with prefix /56
Product-Group=evo
On QFX series switches working on Evolved, IPv6 traffic forwarding failure is seen with route prefix /56.
PR Number
Synopsis
Category: PFE COS features on BT based platforms
1797592
More than 8 forwarding-classes cannot be configured with CBF
Product-Group=evo
On PTX10001-36MR, error will be displayed when we commit more than 8 forwarding-classes (FCs) which are configured with Class Based Forwarding (CBF) even though the product supports upto 16 forwarding-classes configured with CBF.
PR Number
Synopsis
Category: PFE L2 forwarding features on BT based platforms
1785084
IFBD lookup Failure in DLU, packets needs to be dropped rather than learned through control IFL in packetio.
Product-Group=evo
Related to L2 level security fix.
PR Number
Synopsis
Category: QFX Control Plane VXLAN
1777635
Traffic loss for few seconds will be observed after restarting l2-learning process on L3 VxLAN gateway
Product-Group=evo
On all Junos and Junos Evolved platforms, in the EVPN-VXLAN( Ethernet Virtual Private Network- Virtual Extensible Local Area Network) scenario, traffic loss for few seconds would be observed when a user restart l2-learning process on a Layer-3 VXLAN gateway. This happens because of timing issues in the kernel, which mistakenly delete MAC routes of its associated devices instead of updating them in the table. The traffic from devices with those MAC addresses won't flow until the system is back on track and syncing properly.
PR Number
Synopsis
Category: VPWS, L2 CKT, EVPN-VPWS
1797839
Traffic drops observed in the L2Circuit/L2VPN scenario
Product-Group=evo
On Junos Evolved ACX platforms, traffic drops are observed when an update is processed in the L2Circuit (Layer 2 Circuit)/L2VPN (Layer 2 VPN) scenario on executing the CLI command "clear isis database all". The issue happens due to the reuse of the same port resource when PFE (Packet Forwarding Engine) receives the deletion and addition of port resources.
PR Number
Synopsis
Category: DNX platform MPLS FRR features
1752445
RLI53385: GL: 16xSFP56: After ungraceful removal of 16xSFP56 in slot 2, 3; Packet dropped due to congestion seen
Product-Group=evo
On a ungraceful removal and plugging back of IOCARDs on Gamora, there would be packet drops due to congestion.
PR Number
Synopsis
Category: JDHCP daemon for EVO platform to handle DHCP protocol
1775275
EVO(EVPN Fabric): DHCP packets are getting relayed even after deleting the dhcp relay configuration from the leaf
Product-Group=evo
With a router running Junos Evolved software and in the ERB EVPN VXLAN scenario. The leaf router/switch continue to forward DHCP packets even after removing the "dhcp-relay configuration" from the IRB interface.
PR Number
Synopsis
Category: EVO Class of Services
1787101
Deletion of classifier/rewrite with import statement, along with some extra rules leads to the cosd process crash
Product-Group=evo
On all Junos Evolved platforms configured with COS (Class-Of-Service), when classifier/rewrite has imported rules from a parent and has its own rules on top of it, it is observed that if the import is deleted, the imported rules are not cleaned up properly. This applies to the rules that add to the parent's base rules, as well as to those rules that overwrite the parent's base rules and results in cosd process crash.
PR Number
Synopsis
Category: Interface PRs defect & enhancement requests
1774222
Multiple processes crash when more than 150 vlan entries are configured in vlan-id-list under AE IFL
Product-Group=evo
Continuous crash of multiple processes is observed in Junos Evolved platforms when the vlan-id-list configuration under AE IFL has 150 or more vlans configured.
PR Number
Synopsis
Category: EVO MACSEC Platform Independent Implementation
1762141
The dot1xd process crash will be observed due to an assert condition
Product-Group=evo
On the Junos OS Evolved platforms configured with MACsec (Media Access Control Security ) bounded-delay, the incorrect MACsec bounded delay stats timer ref count will result in an assert condition leading to the dot1xd process crash. The dot1xd process crash will flap the MACsec sessions.
PR Number
Synopsis
Category: EVO category to hold IPv6 Neighbor Discovery Protocol and re
1802833
The egress traffic loss occurs when IPv6 Router Solicitation (RS) packets are processed just after interface flap(down/up)
Product-Group=evo
On all Junos Evolved platforms, the the egress traffic loss occurs when IPv6 Router Solicitation (RS) packets are processed just after interface flap(down/up).
PR Number
Synopsis
Category: mgd, ddl, odl infra issues
1798464
Configuration archival through FTP, doesn't work with presence of firewall filter on the loopback interface even when FTP ports are allowed.
Product-Group=evo
On all Junos OS Evolved platforms, the configuration archival through FTP doesn't work with presence of firewall filter on the loopback interface. EPSV (ftp in passive mode) mode was used by default during FTP configuration archival. This causes the file transfer to fail even when standard FTP ports are permitted in the firewall filter. The fix for this PR changed ftp to operate in EPRT mode by default like Junos.
PR Number
Synopsis
Category: SNMP, mib2d issues
1704878
Neighbor device details not listed under snmp walk [ipNetToMediaPhysAddress]
Product-Group=evo
On Junos Evolved platforms, SNMP walk table (ipNetToMediaPhysAddress) is not updated when a neighbour entry is configured.
PR Number
Synopsis
Category: EVPN control plane issues
1792566
Traffic drop in between EVPN hosts might be seen when "vlan-id none" is configured and any commit changes done under "protocols mpls"
Product-Group=evo
On all Junos Evolved ACX and PTX platforms, Traffic drop in between EVPN hosts might be seen when "vlan-id none" is configured and any commit changes done under "protocols mpls". The intermittent drops are due to MAC label refresh post commit change.
PR Number
Synopsis
Category: Layer 2 Control Module
1770053
xSTP configured interface will remains in discarding state
Product-Group=evo
On all Junos and Junos OS Evolved Platforms, when an interface is added inside RSTP (Rapid Spanning Tree Protocol), VSTP (VLAN Spanning Tree Protocol), MSTP (Multiple Spanning Tree Protocol) or STP (Spanning Tree Protocol), because of STP port creation fail from l2cpd (Layer 2 control protocol daemon), port will remains in discarding state. This leads to traffic impact.
PR Number
Synopsis
Category: Layer2 forwarding on EX/NTF/PTX/QFX
1772424
Connectivity between static and LDP signaled pseudowires broken in VPLS after upgrade and results in VPLS traffic drop
Product-Group=evo
On all Junos and Junos OS Evovled platforms, when there is a upgrade and also when one mesh group of routing instance is substring of other, the connection between static and LDP (Label Distribution Protocol) signaled psuedowires is broken will lead to traffic drop.
PR Number
Synopsis
Category: Label Distribution Protocol
1801384
An invalid remote neighbor address is shown for IPv6 LDP with session-protection configured
Product-Group=evo
On all Junos and Junos Evolved platforms, for targeted and non-targeted IPv6 LDP sessions, the IPv6 loopback address is not learned in the right format, and session-protection is not enabled.
PR Number
Synopsis
Category: RPD Interfaces related issues
1709629
RPD CPU utilization is 100% when configured with virtual router-advertisement for AE interface
Product-Group=evo
On all Junos and Junos OS Evolved platforms rpd ( Routing protocol daemon) CPU utilisation reaches 100% when configured with virtual router-advertisement for AE interface due to which AE member link flaps.
PR Number
Synopsis
Category: RPD Next-hop issues including indirect, CNH, and MCNH
1785884
The rpd crash is observed due to segment fault
Product-Group=evo
On Junos OS Evolved platforms, when no acknowledgment is received from PFE (Packet Forwarding Engine) within timeout results in the rpd (Routing Process Daemon) crash. This issue happens when routes requesting acknowledgment do not receive acknowledgment leading to segment fault.
PR Number
Synopsis
Category: Resource Reservation Protocol
1785214
RSVP incorrectly determines the outgoing interface resulting in the rpd crash
Product-Group=evo
On Junos platforms, the rpd (Routing Protocol Process Daemon) crash is observed when LSP (Label-Switched-Path) terminates on the incorrect outgoing interface. The issue happens because RSVP (Resource Reservation Protocol) incorrectly determines the outgoing interface that the ResvTear applies to.
PR Number
Synopsis
Category: PTX10K specific platform PRs
1766097
PTX10008: When NSR Enabled and FMBB Knobs are configured and if SIB is Offline/Online casue resiliencyd core
Product-Group=evo
PTX10008: When NSR Enabled and FMBB Knobs are configured and if SIB is Offline/Online casue resiliencyd core
PR Number
Synopsis
Category: Issues related to control plane security
1781732
Junos OS and Junos OS Evolved: Impact of Terrapin SSH Attack (CVE-2023-48795)
Product-Group=evo
An Improper Validation of Integrity Check Value vulnerability in OpenSSH before 9.6 of Juniper Networks Junos OS and Junos OS Evolved allows a remote attacker to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka the Terrapin Attack. Please refer to https://supportportal.juniper.net/
JSA76462
[juniper.net]
for more information.
PR Number
Synopsis
Category: Authentication, Authorization, Accounting, PAM (RADIUS/tacplus)
1797496
Config login class with allow/deny-configuration-regexps not working as expected with Routing-instances
Product-Group=evo
Config login class with allow/deny-configuration-regexps not working as expected with Routing-instances
PR Number
Synopsis
Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1718063
After deleting commit scripts with transient changes, the changes do not take effect
Product-Group=evo
On Junos OS Evolved ACX7100-32C / ACX7100-48L / ACX7509 / PTX10001-36MR / PTX10003 / PTX10004 / PTX10008 / PTX10016 platforms, when a commit script with transient configurations is deleted, daemon does not see the change after commit.
1794536
The device goes into configuration locked state due to stale mgd
Product-Group=evo
The device is went into config locked state due to stale mgd. For netconf sessions with , if ungraceful exit happens, the lock is not released. There is auto cleanup supported for such cases, But it is not triggered under problem conditions as faced in this PR. This leads to device remain in locked state due to stale entry. "request system logout pid " can be used for cleanup and to recover from this state.
PR Number
Synopsis
Category: X-Men hwd/chassisd software related issues.
1700839
ACX reports "/psm/0/ hwdre/0/cm/0/ psm_mcu /psm0/psm_cml_cmd_fault" even though the PSM is in working order
Product-Group=evo
ACX reports "/psm/0 /hwdre/0 /cm/0 /psm_mcu/ psm0/psm_cml_cmd_fault" even though the PSM is in working order
PR Number
Synopsis
Category: X-Men PTP timing related issues.
1761078
Observing spikes in 1pps performance during long run testing
Product-Group=evo
On long Hour performance(more than 24 hours) testing spikes/pattern is observed in 1pps performance report.
22.4R3-S2-EVO - List of Known issues
PR Number
Synopsis
Category: EVO Layer-2 switching for BCM XGS Platforms
1796159
QFX5130/QFX5700: In some specific configuration commit sequences, intermittent traffic drop is seen on a few VXLAN enabled VLANs.
Product-Group=evo
On QFX5130/QFX5700 platforms, intermittent traffic drop might be seen when VXLAN configurations and UFT host-profile configuration are changed in the same commit operation. This problem will not be seen if the UFT profiles are changed in a separate commit
Resolved In:
evo:23.2R2-S1-EVO evo:23.4R2-EVO evo:24.1R2-EVO evo:24.2R1-EVO evo:24.3R1-EVO
PR Number
Synopsis
Category: Express BT PFE L3 Features
1777759
LAG interfaces will take longer than usual to come up in a scaled scenario with ALB
Product-Group=evo
On PTX10001, PTX10004, PTX10008 and PTX10016 platforms, if Adaptive load balancing (ALB) is configured on LAG interface, the LAG interfaces will take longer than usual to be up if they are all enabled in the same commit. LAG interfaces get stuck in 'attached' state. This issue happens in a scaled Link Aggregation Group (LAG) (~65 ae*) scenario.
Resolved In:
evo:22.2R3-S4-EVO evo:22.3R3-S3-EVO evo:22.3X80-D44-EVO evo:23.2R2-S1-EVO evo:23.4R1-S2-EVO evo:23.4R2-EVO evo:24.2R1-EVO evo:24.3R1-EVO junos:24.2R2
1790095
pfestatsd process may fail to restart when running out of file descriptors
Product-Group=evo
pfestatsd process was running out of file descriptors when there are 16 FPCs in the system as the number of concurrent connections exceeded 1024
Resolved In:
evo:21.4R3-S8-EVO evo:22.2R3-S4-EVO evo:22.3R3-S3-EVO evo:22.3X80-D43-EVO evo:22.3X80-D44-EVO evo:23.2R2-S1-EVO evo:23.4R1-S2-EVO evo:23.4R2-EVO evo:24.2R1-EVO evo:24.3R1-EVO junos:23.4R2 junos:24.2R1
1792173
Flabel sequencing is not correct leading to traffic loops and congestion in the PFE on PTX platforms
Product-Group=evo
Flabel sequencing is not correct leading to traffic loops and congestion in the PFE on PTX platforms
Resolved In:
evo:21.4R3-S7-EVO evo:21.4X6-EVO evo:22.2R3-S4-EVO evo:23.2R2-EVO evo:23.4R1-S2-EVO evo:23.4R2-EVO evo:24.1R1-EVO evo:24.2R1-EVO
PR Number
Synopsis
Category: BX PFE firewall issues
1772149
Balerion-FT:Firewall: aftmand-bx cores continuously at JexprHandleFilter:: updatePfeInst, when attaching filter which has 5-tuples+FC+DP+TTL+Fragment+ifl matches
Product-Group=evo
If a filter does not compile due to an unsupported match combination (i.e. the set of matches configured in the filter is not supported by hardware), attaching this filter to an interface will cause aftmand-bx to crash.
Resolved In:
evo:22.2R3-S4-EVO evo:22.3R3-S3-EVO evo:22.3X50-EVO evo:22.3X80-D44-EVO evo:23.2R2-S1-EVO evo:23.4R1-EVO evo:23.4R1-S2-EVO evo:23.4R2-EVO evo:24.1R1-EVO
PR Number
Synopsis
Category: CoS support on DNX
1793256
Error messages are populating "getQosRewriteHwMapIdFromIflIndex" and interface ifd queue stats traffic is going to the wrong queue
Product-Group=evo
ACX7509 :: Observing Error messages are populating "getQosRewriteHwMapIdFromIflIndex" and verify interface ifd queue stats traffic is going to wrong queue"
Resolved In:
evo:23.4R2-EVO evo:24.2R1-EVO evo:24.3R1-EVO
PR Number
Synopsis
Category: DNX platform MPLS FRR features
1768729
Unknown unicast IPv4 Traffic received with UDP destination port 8503 will be flooded back to Source PE
Product-Group=evo
On the Junos Evolved ACX7K platform, the split horizon rule is broken when an IPv4 packet with destination UDP port 8503 is received on the system over the Ethernet VPN (EVPN) /Layer-2 network. This will result in the traffic being sent /flooded to the source PE router. The below filter can be seen incrementing during the issue. pfe> show evo-pfemand filter counters filter-name __BfdLspMplsSelfPingTrap_unit0__ Counter-Name Packets BytesBfdLspMplsSelfPingTrap_unit0-rule 125016 99578126
Resolved In:
evo:22.1R3-S5-EVO evo:22.3R3-S2-EVO evo:23.2R2-EVO evo:23.2R2-S1-EVO evo:23.4R2-EVO evo:24.1R1-EVO
PR Number
Synopsis
Category: sflow issues on ACX platforms
1781169
[sflow][ACX7100-48L] outputPort field is reported as 0 in exported samples for sflow ingress sampling
Product-Group=evo
[sflow][ACX7100-48L] outputPort field is reported as 0 in exported samples for sflow ingress sampling
Resolved In:
PR Number
Synopsis
Category: EVO ARP related PRs
1776871
Functionality provided by arp/ndp publish argument doesn't work on all Junos OS Evolved platforms
Product-Group=evo
Functionality provided by publish argument for static arp and static ndp configuration is not working on all Junos OS Evolved platforms.
Resolved In:
evo:23.2R2-S1-EVO evo:23.4R1-S2-EVO evo:23.4R2-EVO evo:24.1R1-EVO evo:24.2R1-EVO
PR Number
Synopsis
Category: Interface PRs defect & enhancement requests
1762065
monitor interface or show interface does not display the interface description
Product-Group=evo
Enhancement in EVO platform for the command "monitor interface" and "show interface" include interface description
Resolved In:
evo:22.3R3-S3-EVO evo:23.2R2-S1-EVO evo:23.4R1-S2-EVO evo:23.4R2-EVO evo:24.1R1-EVO
PR Number
Synopsis
Category: Paragon Active Assurance Test Agent Plug-In
1733161
Junos Evolved system is running, but all interfaces are off
Product-Group=evo
CC web UI does not show interface when test agent running on 7509-a.
Resolved In:
evo:21.3R3-S5-EVO evo:22.3X50-EVO evo:22.3X80-D39-EVO evo:22.4R3-EVO evo:23.1R2-EVO evo:23.2R1-S2-EVO evo:23.2R2-EVO evo:23.3R1-EVO evo:23.4R1-EVO
PR Number
Synopsis
Category: Express PFE MPLS for EVO platforms
1765107
Unknown sensors are added in PFE on all Junos OS Evolved platforms
Product-Group=evo
On all Junos OS Evolved platforms, any client (in this case it was LDP), a route (with a sensor attached) is added and deleted immediately. This is a timing issue and easily reproducible.
Resolved In:
evo:22.2R3-S4-EVO evo:22.3R3-S3-EVO evo:22.3X50-EVO evo:22.3X80-D40-EVO evo:23.2R2-EVO evo:23.4R1-EVO evo:23.4R2-EVO evo:24.1R1-EVO
PR Number
Synopsis
Category: Multiprotocol Label Switching
1719162
MPLS LSP stats will not increment post the rpd restart
Product-Group=evo
On all Junos and Junos OS Evolved platforms post rpd restart using cmd "restart routing immediately" mpls lsp statistics will not work.
Resolved In:
evo:22.1R3-S6-EVO evo:22.2R3-S4-EVO evo:22.3R3-S3-EVO evo:22.3X50-EVO evo:22.3X80-D36-EVO evo:22.3X80-D37-EVO evo:23.2R2-EVO evo:23.3R1-EVO evo:23.4R1-EVO
PR Number
Synopsis
Category: Multicast Routing
1777774
The rpd process crash is observed when MVPN PE receives PIM join messages from the remote peers
Product-Group=evo
On all Junos Evolved platforms, when MVPN (Multicast Virtual Private Network) configured device receives PIM join or IGMP report from the remote peer installs route in next-hop and not in multicast composite next-hop, causing the rpd process to crash.
Resolved In:
junos:22.1R3-S5 junos:22.3R3-S2 junos:22.4R3-S1 junos:23.2R2 junos:23.4R2 junos:24.1R1
PR Number
Synopsis
Category: PTX10K Line Card specific interface PRs
1776596
Interface stay in link DOWN state when using third party optics
Product-Group=evo
On Junos OS Evolved platforms and MX ULC based line cards, interfaces will stay DOWN when using third party vendor optics, due to an incorrect programming of EEPROM when plugged into the device.
Resolved In:
evo:22.3X50-EVO evo:23.2R2-EVO evo:23.4R1-S2-EVO evo:23.4R2-EVO evo:24.1R1-EVO evo:24.2R1-EVO junos:22.3X60 junos:23.4R2 junos:24.1R1 junos:24.2R1
PR Number
Synopsis
Category: PTX10K specific platform PRs
1781493
Ungraceful FPC removal from chassis causing "hwdre" crash and process stops leading to FPC in fault state
Product-Group=evo
On all Junos Evolved PTX10004/PTX10008/PTX10016 platforms, when FPC(Flexible PIC Concentrator) is removed ungracefully from the chassis, hwdre daemon crash is observed causing FPC to be in fault state.
Resolved In:
evo:22.3X50-EVO evo:22.3X80-D41-EVO evo:23.2R2-EVO evo:23.4R1-S1-EVO evo:23.4R2-EVO evo:24.1R1-EVO
Modification History
First publication 2024-06-13
22.4R3-S2-EVO: Software Release Notification for JUNOS Evolved Software