Alert Type
SRN - Software Release Notification
Risk
Risk Description
Low/Notification
Software Release Notification
Impact
Impact Description
Low/Notification
Software Release Notification
Product Affected
ACX EX MX NFX PTX QFX SRX vSRX
Alert Description
Junos Software Service Release version 23.2R2-S1 is now available for download from the Junos software download site
Download Junos Software Service Release:
Go to
Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select
Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as need and follow the prompts
Solution
Junos Software service Release version 23.2R2-S1 is now available.
23.2R2-S1 - List of Fixed issues
PR Number
Synopsis
Category: SRX ISSU infra related issues
1803376
The In-Service Software Upgrade (ISSU) fails in L2HA cluster deployment
Product-Group=junos
On SRX-1500 platforms, In-Service Software Upgrade (ISSU) fails in L2HA cluster deployment.
PR Number
Synopsis
Category: MX YT-ZF Linecards Fabric Software Category
1788846
LC9600: Continuous Fabric Request timeout errors maybe logged in /var/log/messages when a previously active PFE is disabled due to a Fatal fault.
Product-Group=junos
If a PFE ASIC has a fatal fault leading to PFE Disable, there is a possibility that Fabric REQ Timeout logs may continue to flood the log messages for that PFE even though the PFE is no longer doing any traffic. These log messages can be ignored, but they will result in the /var/log/message file being rotated frequently.
PR Number
Synopsis
Category: MPC Fusion SW
1777534
On MX and EX platform replacing the line-cards may trigger FPC to be offlined due to unreachable destinations
Product-Group=junos
On Junos MX and EX9200 platforms when replacing MPC2E-NG and EX9200-40XS with MPC3E-NG, SCBE3 and EX9200-MPC cards, inserting the new MPC may cause new and other line cards to go offline due to unreachable destinations. This happens due to some registers on the fabric card is not properly updated once the fabric channel bonding has changed and impacts the traffic.
PR Number
Synopsis
Category: SRX2000/50000 issue
1793262
FPC reboot seen on SRX platforms with SPC3 card post RG failover
Product-Group=junos
On SRX5K platforms with SPC3 card, the FPC (Flexible PIC Concentrator) card reboots when a RG0 failover (in chassis cluster scenario) is performed. Due to this, traffic impact can be seen.
PR Number
Synopsis
Category: common or misc area for SRX product
1779749
Traffic loss due to PPM not offloading LACP
Product-Group=junos
On SRX5K platforms, the LACP (Link Aggregation Control Protocol) packets are reaching the RE (Routing Engine) instead of ppm (Periodic packet management) which is causing extra strain on RE leading to dcpfe core dumps and causing LACP connections to go down or flap.
PR Number
Synopsis
Category: BBE Layer-2 Bitstream Access
1796125
The broadband subscriber (L2BSA subscribers) on the core interface logging out with interface state changes
Product-Group=junos
On all Junos platforms, any configuration changes that involve interface down/up sequence, result in logging-out L2BSA (Layer 2 Broadband Subscriber Access) subscribers associated with that core interface.
PR Number
Synopsis
Category: Track PRs in BGP BMP area & is part of BGP inside RPD.
1796530
High CPU utilization due to BMP to be running with the longest and highest run count
Product-Group=junos
In a rare situation, BMP might falls into a loop processing rib-in RM update messages but none of message being sent out. It can hog CPU for long time until the BMP station state is bounced. Since BMP task has low priority, it will yield CPU if there are other tasks jump in. So BMP will only hog CPU when system is idle and won't block other important tasks.
PR Number
Synopsis
Category: PFE COS features on BT based platforms
1797592
More than 8 forwarding-classes cannot be configured with CBF
Product-Group=junos
On PTX10001-36MR, error will be displayed when we commit more than 8 forwarding-classes (FCs) which are configured with Class Based Forwarding (CBF) even though the product supports upto 16 forwarding-classes configured with CBF.
PR Number
Synopsis
Category: MX304 Chassis specific platform
1798511
RE switchover will cause multiple issues on MX304
Product-Group=junos
On MX304 platforms with dual Routing Engine (RE) and configured with Graceful Routing Engine Switchover (GRES), after RE switchover, Packet Forwarding Engine (PFE) information on the secondary RE is not getting properly updated as that on primary RE. This may result in issues like interface flap, protocol flap etc.
1799431
JDI-REGRESSION:MX304: cty core seen during usb upgrade from 23.1R1.8 to 23.2R2.18
Product-Group=junos
cty is a log collecter daemon process Which might get crashed during bootup It does not make any impact on the performance as its an independent process to collect logs only
PR Number
Synopsis
Category: Virtual-chassis platform/chassisd infrastructure PRs for MX
1798681
CHASSISD_IFDEV_RTSLIB_FAILURE: ifdev_create: rtslib_ifdm_add failed (No such file or directory) after creating a virtual interface tunnel
Product-Group=junos
The error messages in question are not-service affecting and would not be noticed by regression scripts.
PR Number
Synopsis
Category: Class of Service
1793588
An error was observed while performing the interface flap by making PIC on/off
Product-Group=junos
On all Junos and Junos OS platforms, while performing interface flap by making pic on/off, error is observed.
1795898
COS output-traffic-control-profile is not getting attached to ps transport IFLs on a specific MX platforms that support HCOS
Product-Group=junos
COS output-traffic-control-profile does not get attached to ps (pseudowire service) transport IFLs when ps interfaces are configured over lt/rlt (logical tunnel/redundant logical tunnel) and both - ps transport IFL and ps service IFLs have COS output-traffic-control-profile configured, TCPs have different SMAPs (scheduler-maps) configured and these COS configuration on both these types of IFLs are committed in a single commit. This can impact COS scheduling on ps transport IFL.
PR Number
Synopsis
Category: QFX Access Control related
1778056
Core dumps for pfex and dot1x seen due to dot1x authentication
Product-Group=junos
On all Junos platforms, core dumps for Pfex and dot1x will be seen, when dot1x is authenticated. It is a scenario of basic authentication where EAP ( Extensible Authentication Protocol ) packets are being received from the client.
1794778
Dot1x process crash will be seen in the system with "server-timeout" & "server-fail use-cache" configuration
Product-Group=junos
On all Junos platforms having 802.1x with "server-timeout" & "server-fail use-cache" configuration, 802.1x process crash will be seen. In initial authentication client receives multiple egress-VLANs from radius server and during re-authentication if radius server is unreachable, then clients gets authenticated in server-fail use-cache scenario and the egress VLAN list is deleted. When 802.1x process attempts to access the same egress VLAN list which is deleted then the 802.1x process crash is seen and clients will face traffic drop.
PR Number
Synopsis
Category: CoS support on DNX
1772177
On ACX710/5448 with hierarchical-scheduler EVPN ETREE (Ethernet virtual private network Etree feature) leaf-to-leaf communication is allowed
Product-Group=junos
EVPN ETREE (Ethernet virtual private network Etree feature) leaf to leaf communication on AE (Aggregated Ethernet) interface happens if hqos (Hierarchical class of service) is enabled on AE.
PR Number
Synopsis
Category: Firewall support for DNX
1798425
Commit check failure will be reported when family ethernet-switching is configured on a EVPN ETREE/EVPN ELAN interface
Product-Group=junos
On ACX5448 platforms, commit check failure will be reported when family ethernet-switching is configured on a EVPN ETREE/EVPN ELAN interface.
PR Number
Synopsis
Category: ACX platform interface issues
1784447
ACX710 CFM asynchronous-notification feature driven on CCC-down is not supported
Product-Group=junos
ACX710 CFM asynchronous-notification feature driven on CCC-down is not supported. While this feature is configurable on ACX710, it does not work as expected, in that after the remote PE-CE link flap (ie. down and up) , the local PE does not bring up the CE-facing port.
PR Number
Synopsis
Category: ACX LAG infrastructure
1789949
The egress ports on ACX710 incorrectly tagging traffic expected to be untagged over CCC/VPLS interfaces
Product-Group=junos
On Junos ACX710 platforms, untagged packets egressing out of CCC(Circuit Cross Connect)/VPLS(Virtual Private LAN Service) interfaces that perform no-op (No-Operation) at the egress port are incorrectly tagged impacting the traffic to CE (Customer Edge) device.
PR Number
Synopsis
Category: JUNOS Dynamic Profile Configuration Infrastructure
1797305
The KRT queue stuck resulting in subscriber traffic loss
Product-Group=junos
On Junos MX platforms with subscriber dynamic profile versioning, following a commit configuration command, the krt ( Kernel routing table) queue becomes stuck on the master Routing Engine (RE), causing loss of subscriber traffic and subsequent client restarts. This occurs due to a large number of queued entries, resulting in blockage of the KRT queue.
PR Number
Synopsis
Category: Firewall related development
1743233
On PTX10001-36MR/PTX10008/PTX100016 Junos OS Evolved platforms support for a firewall policer rate needs to be increased
Product-Group=junos
On PTX10001-36MR/PTX10008/PTX100016 Junos OS Evolved platforms, the firewall policer rate, Bandwidth limit, committed-information-rate, peak-information-rate, burst-size-limit are increased through this PR.
PR Number
Synopsis
Category: Configd, ffp issues
1797425
Commit of "openconfig-interfaces:interfaces interface <> config openconfig-vlan:tpid <>" configuration fails with commit scripts error on glenrothes
Product-Group=junos
Commit of "openconfig-interfaces:interfaces interface <> config openconfig-vlan:tpid <>" configuration fails with commit scripts error on glenrothes
PR Number
Synopsis
Category: EX4100 RE, Platform Infra, Drivers
1797727
Intermittent alarms related to fan overspeed value can be observed on EX4100 platform
Product-Group=junos
On Junos EX4100 platform, intermittent alarms can occur regarding fan overspeed on the FPCs if they exceed the predefined fan speed threshold. These alarms are regularly activated and deactivated whenever the fan speed crosses the threshold and subsequently falls back below it. There is no service impact due to this.
PR Number
Synopsis
Category: EX interfaces issues assignment alias
1789617
On EX2300/EX3400 series SFP-SX interface is not come up due to auto-negotiation failure
Product-Group=junos
On EX2300/EX3400 series with SFP-SX interface is not coming up due to auto-negotiation failure.
PR Number
Synopsis
Category: EX4400 PFE software
1795545
On all Junos EX platforms rewrite rules does not work properly when multiple interfaces are configured
Product-Group=junos
On all EX Junos platforms enabled with CoS, if there is rewrite-rule applied to the multiple interfaces, the rewrite-rule which is present for only one of the logical interfaces might work as expected due to this issue.
1795807
Cos rewrite rules does not work properly when input/output-vlan-map swap are configured
Product-Group=junos
On Junos EX4400 platforms enabled with CoS rewrite, if there is rewrite-rule applied to the input/output-vlan-map swap interface, the rewrite-rule of the logical interfaces does not work properly since the priority value for the queue is not updating. There is no traffic impact due to this, only CoS rewrite value is not updating.
PR Number
Synopsis
Category: Express PFE including evpn, vxlan
1728639
DHCP-relay is not working when no-snoop is enabled on the QFX10002-60C
Product-Group=junos
When the DHCP relay mode is configured as no-snoop, we are observing the offer gets dropped due to incorrect asic programming. Packets are not coming to the jdhcd daemon.This issue only affects while running DHCP relay on EVPN/VXLAN environment.
PR Number
Synopsis
Category: Express PFE L2 fwding Features
1769908
[qfx10K] proxy-arp restricted not working as expected
Product-Group=junos
When configuring proxy-arp restricted, a copy of ARP Request is sent to the Routing engine for processing and another copy is broadcasted on all interfaces member of that specific vlan, making proxy-arp restricted not to work as designed
PR Number
Synopsis
Category: SRX4100/SRX4200 platform software
1739559
SRX4100/4200 accepts the datapath-debug configuration although it does not support it
Product-Group=junos
It is possible to set and commit the datapath-debug configuration on platforms SRX4100/SRX4200 although datapath debugging is not supported on those platforms. because of this unsupported configuration being accepted the RE (Routing Engine) load can go high and cause traffic outage. The workaround is to remove the datapath-debug configuration and perform a commit.
PR Number
Synopsis
Category: MX Inline Jflow
1798466
With scaled routes and flex-flow-sizing configured memory exhaustion will lead to an FPC crash
Product-Group=junos
On all Junos MX platforms with LC(Linecard) MPC (Modular Port Concentrator)4-9 installed, the Linecard crash can be seen in the corner case. This issue will be seen when Jflow is configured with the inline-services flex-flow-sizing enabled and 'flow-table-size' near the total capacity is configured. There will be a traffic impact due to the crash.
PR Number
Synopsis
Category: BSDX Software installation issues
1783119
Delays can be seen while the upgrading process runs due to the status of UFS set to mode enable.
Product-Group=junos
In USF mode enabled router, While upgrading router having scaled services AMS config with "load-balancing-options disable-hash", Router continuously dumps "'disable-hash' knob is only allowed in USF mode" error. This delays the bootup time with scaled config.
PR Number
Synopsis
Category: Flow Module
1798041
On Juniper SRX platforms GTP-U packet destination port gets duplicated to the source port and subsequently discarded by policy.
Product-Group=junos
On Juniper SRX devices with GTP-U distribution feature enabled, GTP-U source port will get duplicated as same as the destination port in the traffic from the server back to the source and blocked by the security policy. Due to this, all impacted reverse GTP-U packets will be discarded.
1802089
The commit will not go through when more than 128 vrf-groups for l3vpn configuration are configured
Product-Group=junos
On SRX4x00 and SRX5x00 platforms, the commit will not go through and the traffic will get impacted when more than 128 vrf-groups for l3vpn configuration are configured.
PR Number
Synopsis
Category: IPSEC/IKE VPN
1793207
Tunnel IKE and IPSec fails to come up on Junos SRX platforms with L2HA and FIPS after switchover
Product-Group=junos
On Junos SRX5K platforms in cluster with Layer2 High Availability (L2HA) and Federal Information Processing Standards (FIPS) enabled together won't go through a successful switchover. The backup node will not be able to move to active mode successfully leading to service impact.
PR Number
Synopsis
Category: Security platform jweb support
1766378
J-Web UI cannot be launched
Product-Group=junos
On all SRX platforms, while displaying the configured login message from Command Line Interface (CLI), the newline characters will be added which results in parsing error. Hence J-Web UI cannot be launched.
1789466
Jweb does not display address book entries properly after certain operations.
Product-Group=junos
On SRX platform, Jweb does not display address book entries properly after certain operations.
PR Number
Synopsis
Category: Layer2 forwarding on EX/NTF/PTX/QFX
1776913
ARP resolution fails when EVPN configured with preserve-nexthop-hierarchy
Product-Group=junos
On all Junos and Junos Evolved MX platforms, it is observed that when EVPN-MPLS and Preserve-nexthop-hierarchy are configured, then ARP (Address-resolution Protocol) resolution fails and impacts the MPLS (Multi Protocol Label System) header packets that are sent to the MPLS core.
PR Number
Synopsis
Category: MPC11 ULC fabric software related issues.
1771488
Consecutive polls change for bursty CRC from 1 to 3 for HOC cards MX Platforms
Product-Group=junos
Previously, a burst was considered to be a single poll. Now, a burst consists of 3 consecutive polls. This makes the system more robust against sudden fluctuations.
1771492
aging threshold change from 100 to 5000(NRZ) / 10000(PAM4) HOC and HSL2 cards on MX Platforms
Product-Group=junos
Previously on MX line cards, a fabric link was taken to error if CRC errors exceeded 100 within the aging sliding window (30day) interval. With this change, the threshold is changed to 10000 (for PAM4 cards) and 5000 (for NRZ cards) for all MX (HOC and HSL2) line cards.
PR Number
Synopsis
Category: Track Mt Rainier RE platform software issues
1778324
The FPC connection times out and reboots post mastership switchover
Product-Group=junos
On Junos MX and PTX with VMHost MT-RE (NG-RE), when the RE< -> CB link down triggers the Routing Engine (RE) switchover, the switchover will be successful but Flexible PIC Concentrators (FPC) will not reconnect to the new master RE. The FPCs reboot and then connect to the new master RE automatically.
PR Number
Synopsis
Category: Odin Timing software
1800385
ACX710 PTP master port gives wrong PTP flag values in Announce messages
Product-Group=junos
In rare condition after PTP protocol or interface flaps, some PTP master port would carry the PTP flag 0x08 in Announce message, which means FREQUENCY_TRACEABLE, TIME_TRACEABLE, and PTP_UTC_REASONABLE all set to 0, ie. False. Moreover, The 'localStepsRemoved' value carried in this same Announce message will set to '0', which leads to the downstream slave node calculate the hop counts toward GMC starting as '1'
PR Number
Synopsis
Category: vMX Platform Infrastructure related issue tracking
1729152
The FPC crash or flap in protocols will be seen as soon as port-mirroring or firewall filters with syslog action is enabled
Product-Group=junos
On MX150 platform, when port-mirroring or firewall with syslog configuration is enabled, there will be a memory leak which will cause depletion of buffer memory which will lead to flap in the protocols or the (Flexible PIC Concentrators) FPC crash. This will impact the traffic.
PR Number
Synopsis
Category: QFX L2 PFE
1797516
DCPFE process crash occurs in EVPN-VXLAN scenario
Product-Group=junos
When a vport, which is a memory pointer, is a member of an itable list, the entry in the itable should be removed before freeing the vport. For some corner case, the vport is not removed from the itable when freeing the vport. The freed memory or the reused memory corrupts the itable list and it crashes when performing some operation on the corrupted list.
PR Number
Synopsis
Category: QFX EVPN / VxLAN
1778725
Traffic drop is observed when VIPs become unreachable due to GARP sent on VLANs to which the VIP does not belong
Product-Group=junos
Under a rare scenario, on all Junos and Junos Evolved platforms configured with EVPN-VXLAN (Ethernet Virtual Private Network-Virtual Extensible Local Area Network) type 5 routes, Bridge-Domain, IRB (Integrated Routing and Bridging) and having L4 (Layer 4 device like an application load balancer) devices as single-homed with each border leaf and when VIP (Virtual Internet Protocol) entries are learnt on a leaf and L4 failover happens, it is observed that the VIPs announced by GARP (Gratuitous Address Resolution Protocol) is sent on VLANs that the VIP does not belong to and the incorrect GARP is not handled as per the expectation.
1802958
ECMP programming issue on Junos QFX5K/EX4K in EVPN-VXLAN
Product-Group=junos
In rare scenarios on Junos QFX5K/EX4K platforms that are part of Ethernet VPN - Virtual extensible LANs (EVPN-VXLAN) Fabric topology and employing ECMP (Equal Cost Multi-path) routing on the underlay interfaces between the Leaf and Spine, if one or more of these physical underlay interfaces flaps or their associated underlay protocol adjacency flaps and this time aligns precisely with the associated unicast next-hop deletion process, a race condition may occur, resulting in the potential failure to program the associated ECMP interface next-hop entry correctly in the hardware table.
PR Number
Synopsis
Category: QFX10008/16 QFX10002 Ultimat/Elit platform related issues -
1795339
FPC crash (dcpfe process core-dump) and traffic drop occurred due to "Err Detect Register" and "Data Cache Parity Error"
Product-Group=junosvae
With some HW memory failure in QFX10008/16 Linecards, the PFE process gets stuck in bad state which takes 2-3min for detection causing traffic drops for that time.
PR Number
Synopsis
Category: AMS (aggregated MS interface) related issues for load balanc
1760139
Error log triggered by ams- interface deletion
Product-Group=junos
Software is detecting out of order deletion of nodes because AftList token got deleted before AftUnilist , and the following type of error log would appear: : %PFE-3: fpc5 user.err aftd-trio: [Error] Em: Possible out of order deletion of AftNode AftNode details - AftList token:7076 group:0 tag:None nodeMask:Default nodes: {7064, 3426, } Dependency details - Prev Node/entry details: (1 nodes) - -> 3439(AftUnilist tag:nh(services) NhIndex:741 Type:17 proto:2 nh-flavor:18) This will not have any functionality impact on customer end and this PR applies to MPC10E cards.
PR Number
Synopsis
Category: SRX branch platforms
1714620
High latency will be observed while pinging to peer device
Product-Group=junos
On Branch SRX Platforms, The delay will be observed while pinging to peer device due to high latency when VLAN(Virtual Local Area Network) tagged DHCP(Dynamic Host Configuration Protocol) packets arrive at IRB (Integrated Routing and Bridging) interface.
1780326
IP Monitoring fail to install route after SRX cluster reboot
Product-Group=junos
On Junos SRX branch series platforms in cluster, the IP Monitoring fails to install route after the SRX cluster reboots.
PR Number
Synopsis
Category: Stout card (MPC7) fabric issues
1766578
The FPC Crash will be observed on Junos MX platforms
Product-Group=junos
On Junos MX platforms with dual RE, repeated reboots of a SCBE2/ SCBE3 (Switch Control Board) during FPC transition state can trigger multiple PCIe (Peripheral Component Interconnect) interface error alarms. This results in input/output failures for the fabric planes on that SCB ( SCBE2/ SCBE3), leading them to enter a faulty state. Consequently, the affected FPC crashes, impacting traffic on the line card.
1768592
The SFB3 will go offline during during SFB3 < -> ADC < -> MPC7E link initialization
Product-Group=junos
On MX2020 and MX2010 platforms with Switch Fabric Boards (SFB) 3 and Modular Port Concentrators (MPCs) MPC7E-10G or MPC7E-MRATE inserted via Adapter Card (ADC) MX2000-LC, SFB3 will go offline during SFB3 < -> ADC < -> MPC7E link initialization with a fatal error. This is a timing issue and will not be seen with every SFB3 < -> ADC < -> MPC7E link initialization. It happens because of a race condition between certain events occurring during MPC initialization.
1769983
At MX2020 with SFB3 and MPC7+ADC in FPC slot 11, link errors in fabric planes 1, 4, 7, 10 will be seen upon MPC7/ADC restart in FPC slot 11
Product-Group=junos
On the Junos MX2020 with SFB3 and MPC7+ADC in FPC slot 11, link errors in fabric planes 1, 4, 7, and 10 will be seen upon MPC7/ADC restart in FPC slot 11. The link errors will come along with the 'failed word alignment' syslog message logged by hsl2_channel_train_hsl2_rx(). In the rare scenario, the traffic impact will be observed as some of the fabric links do not come online.
PR Number
Synopsis
Category: ZT/YTpfe bridging, learning, stp, oam, irb software
1792736
Transit traffic does not get forwarded in EVPN-VxLAN scenario on Junos MX/EX platforms
Product-Group=junos
On Junos MX240/MX480/MX960/MX2008/MX10004/MX10008/MX2010/MX2020 platforms with MPC10E/11E/LC9600 line cards and MX304 platform and EX9204/EX9208/EX92014 with EX9200-15C line card, in Ethernet Virtual Private Network-Virtual Extensible LAN (EVPN-VxLAN) scenario the transit traffic does not get forwarded due to incorrect inner ethernet header.
PR Number
Synopsis
Category: Trio pfe l3 forwarding issues
1784593
PFE crash will be seen while running traceroute
Product-Group=junos
On all Junos based MX platforms with MPC1 to MPC9 line cards, in a corner scenario, on running traceroute Packet Forwarding Engine (PFE) crash will be observed if some next-hop which route is pointing to is not set up properly.
PR Number
Synopsis
Category: Authentication, Authorization, Accounting, PAM (RADIUS/tacplus)
1797496
Config login class with allow/deny-configuration-regexps not working as expected with Routing-instances
Product-Group=junos
Config login class with allow/deny-configuration-regexps not working as expected with Routing-instances
PR Number
Synopsis
Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1718692
Configuration update via python script does not work
Product-Group=junos
1794536
The device goes into configuration locked state due to stale mgd
Product-Group=junos
The device is went into config locked state due to stale mgd. For netconf sessions with , if ungraceful exit happens, the lock is not released. There is auto cleanup supported for such cases, But it is not triggered under problem conditions as faced in this PR. This leads to device remain in locked state due to stale entry. "request system logout pid " can be used for cleanup and to recover from this state.
PR Number
Synopsis
Category: Issues related to NETCONF
1792362
RPC request for file copy with routing instances is failing
Product-Group=junos
On Junos OS and Junos OS Evolved platforms configured with routing instances, RPC (Remote Procedure Call) request for file copy using routing instance fails. There is no service/traffic impact due to this issue.
PR Number
Synopsis
Category: MX10K linecard
1785182
On Junos MX and SRX platforms silent FPC reboot is observed with no generation of crash files
Product-Group=junos
On Junos MX platforms with Modular Port Concentrators (MPCs) 7/8/9 line cards, MX10008/MX10016 platforms using LC1201 or LC480 line cards, SRX5K platforms with Services Processing Card (SPC3) cards, due to memory issue causing hardware issue, the Flexible PIC Concentrators (FPC) reboots silently without generating any crash files.
PR Number
Synopsis
Category: MX10K platform
1784080
FPC reboot seen on MX platforms with PMB memory correctable errors
Product-Group=junos
On all MX platforms that support MPC7/MPC8/MPC9/MX10k-LC2101/EX9200-40XS/EX9200-12QS, an unexpected FPC (Flexible PIC Concentrator) reboot may be seen along with PMB memory correctable errors. Service impact can be seen till the FPC restart completes.
PR Number
Synopsis
Category: Windsurf interfaces software
1793999
The 'no-flow-control' interface configuration not retained post ISSU on MX platforms
Product-Group=junos
Flow-control pause frames will be sent out of the interface even with the knob 'no-flow-control' enabled on Junos MX platforms after the ISSU upgrade. This issue will not be seen with non-ISSU software upgrades.
PR Number
Synopsis
Category: Track Windriver Linux issues
1631579
A few line cards will be stuck in the 'Present' state and later go 'Offline'
Product-Group=junos
A system equipped with specific line cards, the line cards will be stuck in the 'Present' state and later go 'Offline' after the line card or router is rebooted. Ideally, the Line Card should go 'Online' instead it goes 'Offline'.
PR Number
Synopsis
Category: Xellent Platform issues
1792732
Packet corruption on QFX10k and PTX10k in the egress pipeline
Product-Group=junos
On QFX10002-36Q/QFX10002-72Q/Q/QFX10002-60C/PTX10002-60C platforms the packet corruption is seen on the egress pipeline and can be seen with any type of traffic.
PR Number
Synopsis
Category: usf ipsec related issues
1791196
EBGP sessions established over IPSEC tunnels would flap if multihop knob with ttl=1 is configured
Product-Group=junos
On all MX platforms, External Border Gateway Protocol (EBGP) sessions established over Internet Protocol Security (IPSEC) tunnels will flap, if multihop knob with ttl=1 is configured.
PR Number
Synopsis
Category: usf nat related issues
1776355
Internet traffic destined for the NAT pool address (Network Address Translation) will loop after configuration changes
Product-Group=junos
On Junos MX platforms, with MS-MPC and SPC3 service cards, Change in "interim-logging-interval" configuration can lead to UDP traffic get looped and it will impacting CPU utilisation and traffic drop can be seen.
Note
: This version includes
PR1733863
which allow automatic i40e NVM firmware downgrade from version 9.10 to 7.0 when downgrade VMHOST WR Linux from version LTS22 to version LTS19
23.2R2-S1 - List of Known issues
PR Number
Synopsis
Category: EX4300 Platform implementation
1789999
[interfaces]:Ex-Hardening:Local/Remote fault insertion from TG is failing
Product-Group=junos
Ex-Hardening:Local/Remote fault insertion from TG is failing
Resolved In:
PR Number
Synopsis
Category: EX2300/3400 platform
1772477
Turning port beacon LED on or OFF may not change the LED status
Product-Group=junos
On EX2300, turning port beacon LED on or OFF may not change the LED status. There is no service impact due to this.
Resolved In:
junos:22.2R3-S4 junos:22.3R3-S3 junos:22.4R3-S2 junos:23.4R2 junos:24.2R1
PR Number
Synopsis
Category: MX YT-ZF Linecards Fabric Software Category
1776054
MX10008 :: PLD is higher than 2000 msec on ungraceful removal of a Fabric board
Product-Group=junos
MX10008 :: PLD is higher than 2000 msec on ungraceful removal of a Fabric board
Resolved In:
PR Number
Synopsis
Category: the replication daemon (repd) for Shared Memory-base
1797189
We may observe repd core (in the "from" release) during ISSU. There are no functional impact due to this repd core
Product-Group=junos
We may observe repd core (in the "from" release) during ISSU. There are no functional impact due to this repd core
Resolved In:
PR Number
Synopsis
Category: Border Gateway Protocol
1728829
In a high scaled environment, high rpd CPU utilization might be observed when a routing related commit is performed
Product-Group=junos
On all platforms, high rpd CPU utilization might be observed when a routing related commit is performed in a high-scaled environment having BGP groups configured with VPN family (inet-vpn, inet6-vpn). No traffic impact or protocol flap will be seen but unexpected high rpd CPU utilisation will raise operational challenges, especially if the system is very scaled.
Resolved In:
evo:22.2R3-S4-EVO evo:23.4R2-EVO evo:24.1R1-EVO junos:20.3X75-D44 junos:22.2R3-S4 junos:23.4R2 junos:24.1R1
PR Number
Synopsis
Category: Track PRs in BGP BMP area & is part of BGP inside RPD.
1796530
High CPU utilization due to BMP to be running with the longest and highest run count
Product-Group=junos
In a rare situation, BMP might falls into a loop processing rib-in RM update messages but none of message being sent out. It can hog CPU for long time until the BMP station state is bounced. Since BMP task has low priority, it will yield CPU if there are other tasks jump in. So BMP will only hog CPU when system is idle and won't block other important tasks.
Resolved In:
evo:22.3X50-EVO evo:22.4R3-S2-EVO evo:23.2R2-S1-EVO evo:23.4R2-EVO evo:24.2R1-EVO evo:24.3R1-EVO junos:20.3X75-D440 junos:20.3X75-D52 junos:22.4R3-S2 junos:23.4R2 junos:24.2R1 junos:24.3R1
PR Number
Synopsis
Category: BGP Segment Routing
1739388
At srv6 ingress put srv6 locator for resolution rather than srv6 sid
Product-Group=junos
At srv6 ingress put srv6 locator for resolution rather than srv6 sid
Resolved In:
junos:23.4R1
PR Number
Synopsis
Category: MX304 Chassis specific platform
1791839
JDI-REGRESSION:MX304: core-spmbpfe-bugatti-pvl-b1 seen in re1
Product-Group=junos
MX304: core-spmbpfe-bugatti-pvl-b1 seen in re1
Resolved In:
PR Number
Synopsis
Category: QFX Access Control related
1778056
Core dumps for pfex and dot1x seen due to dot1x authentication
Product-Group=junos
On all Junos platforms, core dumps for Pfex and dot1x will be seen, when dot1x is authenticated. It is a scenario of basic authentication where EAP ( Extensible Authentication Protocol ) packets are being received from the client.
Resolved In:
junos:21.4R3-S6 junos:22.1R3-S5 junos:22.2R3-S3 junos:22.3R2-S2-J2 junos:22.3R3-S2 junos:22.4R3 junos:22.4R3-S1 junos:23.2R2 junos:23.4R2 junos:24.1R1
PR Number
Synopsis
Category: DNX platform MPLS FRR features
1795486
JDI-RCT:ACX: high L2circuit traffic convergence ~500ms during link flap test.
Product-Group=junos
ACX: high L2circuit traffic convergence ~500ms during link flap test.
Resolved In:
PR Number
Synopsis
Category: Dynamic rendering infrastructure
1690598
VMX :: Incorrect data encoding format is used for the parameter ISIS extended reachability TLV - max link bandwidth when passed to Influx DB server via GNMI
Product-Group=junos
For leaves of data type ieeefloat32, the value will be encoded in bytes while being streamed to collector. The value contained in such leaves may not be completely accurate.
Resolved In:
junos:23.3R1
PR Number
Synopsis
Category: Firewall related development
1743233
On PTX10001-36MR/PTX10008/PTX100016 Junos OS Evolved platforms support for a firewall policer rate needs to be increased
Product-Group=junos
On PTX10001-36MR/PTX10008/PTX100016 Junos OS Evolved platforms, the firewall policer rate, Bandwidth limit, committed-information-rate, peak-information-rate, burst-size-limit are increased through this PR.
Resolved In:
evo:23.2R1-S2-EVO evo:23.2R2-S1-EVO evo:23.4R1-EVO junos:23.4R1
PR Number
Synopsis
Category: EX interfaces issues assignment alias
1789617
On EX2300/EX3400 series SFP-SX interface is not come up due to auto-negotiation failure
Product-Group=junosvae
On EX2300/EX3400 series with SFP-SX interface is not coming up due to auto-negotiation failure.
Resolved In:
junos:22.4R3-S3 junos:23.2R2-S1 junos:23.4R2 junos:24.2R1 junos:24.2R2 junos:24.3R1
1801072
LACP flap seen in the lagavulin device with PDT PROFILE CONFIGS
Product-Group=junos
Dev to update
Resolved In:
PR Number
Synopsis
Category: EX4400 PFE software
1793885
JDI - PDT:ENT:CnB:Multi-Tier Campus:ENTCnB-Enterprise-Metro:(EX4400): after clearing arp on access error seen on aggregation devices with metro config
Product-Group=junos
(EX4400): after clearing arp on access error seen on aggregation devices with metro config
Resolved In:
PR Number
Synopsis
Category: EX POE
1794298
JUNOS_REG: EX4100: POE controller is going down after loading the build. "show poe controller" is not giving any output.
Product-Group=junos
EX4100: POE controller is going down after loading the build. "show poe controller" is not giving any output.
Resolved In:
PR Number
Synopsis
Category: Express PFE L2 fwding Features
1792128
Configuring multiple IFL of different families on Junos QFX10K SP style interfaces leads to traffic loss
Product-Group=junos
On Junos QFX 10K platforms, traffic drop is seen when multiple interface logical (IFLs) of different families are configured on the same interface physical (IFD) with Service Provide (SP) style configuration and layer 2 (L2) ILF is the first IFL to be created.
Resolved In:
evo:24.2R2-EVO evo:24.3R1-EVO junos:22.2R3-S4 junos:22.4R3-S3 junos:23.4R2 junos:24.2R1 junos:24.2R2 junos:24.3R1
1798887
Traffic drops are observed in the VXLAN environment having IPv4 and IPv6 address configured in underlay
Product-Group=junos
On Junos QFX10002-36Q/QFX10002-72Q/QFX10002-60C and PTX10002-60C platforms, the decapsulate of the VXLAN (Virtual eXtensible Local-Area Network) packet will fail and result in traffic drops due to the tunnel termination table not being programmed in PFE (Packet Forwarding Engine).
Resolved In:
junos:22.2R3-S4 junos:22.4R3-S3 junos:23.4R2 junos:24.2R1 junos:24.2R2 junos:24.3R1
PR Number
Synopsis
Category: Libjtask for RPD tasks, scheduler, timers, memory, and slip
1787707
The KRT queue will be stuck on Junos ACX710 platform
Product-Group=junos
On Junos ACX710 platform with BGP (Border Gateway Protocol) configuration, the response message will be lost and it will lead to element being stuck in the KRT (Kernel Routing Table) queue.
Resolved In:
junos:21.2R3-S8 junos:22.4R3-S2 junos:23.4R2
PR Number
Synopsis
Category: track re issu control procedure bugs
1740744
ISSU doesn't break if INDB crashes
Product-Group=junos
On Junos platforms, when ISSU (in-service software upgrade) is initiated, a process called INDB (Incompatible Database) will be triggered to perform a pre-check on database compatibility. There could be some corner case that causes the INDB crash. If that happens, the ISSU should be aborted.
Resolved In:
evo:23.4R2-EVO evo:24.1R1-EVO junos:19.4R3-S13 junos:20.2R3-S9 junos:20.4R3-S10 junos:21.4R3-S6 junos:22.1R3-S5 junos:22.2R3-S3 junos:22.3R3-S2 junos:23.4R2 junos:24.1R1
PR Number
Synopsis
Category: jdhcpd daemon
1790508
EX4400VC : DHCP discover packets will be sent from me0 interface when FPC comes online
Product-Group=junos
On EX4400 device, you may observe DHCP discover packets from me0 even though DHCP is not enabled on that interface. The issue could be seen when EX4400 comes up.
Resolved In:
1801234
MPC10E-DHCP ALQ 1:1 Subscriber Redundancy- Post GRES , New backup Routing engine takes about 5 minutes to learn subscriber routes (access/access-internla) from master routing engine .
Product-Group=junos
Issue was seen when test was done back to back GRES within 5mins time. this is expected behavior from the system as per current architecture. Suggestion is to wait for sometime before maybe 10mins or so for subsequent GRES.
Resolved In:
PR Number
Synopsis
Category: Juniper Device Manager VM Mgmt and infrastructure function
1675919
NFX350 :: JDI_REGRESSION:PLATFORM:SWITCHING:JDM:: Core "localhost.libvirtMib_suba.15909.1656455866.core.tgz" is seen on NFX-350 boxes
Product-Group=junos
NFX350 :: JDI_REGRESSION:PLATFORM:SWITCHING:JDM:: Core "localhost.libvirtMib_suba.15909.1656455866.core.tgz" is seen on NFX-350 boxes
Resolved In:
PR Number
Synopsis
Category: Firewall Authentication
1732210
23.1R2:ISSU:USERFW-CP: Clearpass Auth entry's are getting deleted post successful ISSU
Product-Group=junos
On SRX devices on aruba-clearpass webapi configuration set system services webapi <*> authentication entries could be lost during ISSU or during Junos version upgrades to 23.1 from prior versions. Due to this issue any dataplane traffic using the ClearPass Authentication entries will require reauthentication.
Resolved In:
junos:23.4R2 junos:24.1R1
PR Number
Synopsis
Category: Flow Module
1761542
In a chassis cluster setup the flowd crashes and SPC cards will fail
Product-Group=junos
On SRX platforms, in a chassis cluster setup configured in Active/Active mode, the fabric forward packet enters the flow module causing the flow processing daemon (flowd) to crash, impacting the traffic forwarding and failing the Services Processing Card (SPC).
Resolved In:
junos:23.4R2 junos:24.2R2 junos:24.3R1
1791633
Packets over GRE or IPIP or GRE(PMI) will not reach destination
Product-Group=junos
On Junos platforms with GRE or GRE(PMI) or IPIP tunnels, when tunnel TTL(Time To Live) is set to 1 in the CLI, the traffic sent over GRE or IPIP or GREoIPSec tunnel does not reach its destination.
Resolved In:
junos:21.2R3-S8 junos:22.2R3-S4 junos:22.3R3-S3 junos:23.4R2 junos:24.2R1 junos:24.3R1
PR Number
Synopsis
Category: JSR Infrastructure
1794303
The dfwd core is observed on node1 when performing ISSU upgrade to 23.1 and more
Product-Group=junos
On SRX4600/SRX5400/SRX5600/SRX5800 series in cluster setup, when performing ISSU upgrade to release 23.1 or more the dfwd core will be seen which will not create any service impact. However ISSU happened successfully and cluster setup booted with latest image and firewall is working fine.
Resolved In:
junos:23.4R2 junos:24.2R1 junos:24.2R2 junos:24.3R1
PR Number
Synopsis
Category: all logging related bugs on srx platforms
1716776
Security log missing space between timestamp and hostname
Product-Group=junos
JunOS upgrade to the 22.2R3, 21.3R3-S3, 22.4R1, 21.4R3-S3, 22.3R2, 22.4R2, 21.2R3-S4 , 22.1R3 the security log space between the timestamps and site-name is removed
Resolved In:
junos:21.2R3-S6 junos:21.3R3-S5 junos:21.4R3-S4 junos:22.1R3-S3 junos:22.2R3-S1 junos:22.3R2-S2 junos:22.3R3 junos:22.4R2 junos:22.4R3 junos:23.1R2 junos:23.2R1 junos:23.3R1
PR Number
Synopsis
Category: PTX1000 platform
1653316
Junos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge condition (CVE-2024-21600)
Product-Group=junos
An Improper Neutralization of Equivalent Special Elements vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on PTX Series allows a unauthenticated, adjacent attacker to cause a Denial of Service (DoS). Please refer to https://supportportal.juniper.net/
JSA75741
[juniper.net]
for more information.
Resolved In:
junos:18.2X75-D67 junos:19.1R3-S11 junos:19.2R3-S8 junos:19.3R3-S9 junos:19.4R3-S11 junos:20.2R3-S7 junos:20.3R3-S6 junos:20.3X75-D36 junos:20.3X75-D41 junos:20.4R3-S8 junos:21.1R3-S4 junos:21.2R3-S6 junos:21.2X32-D10 junos:21.3R3-S3 junos:21.4R3-S5 junos:22.1R2-S2 junos:22.1R3 junos:22.2R2-S1 junos:22.2R3 junos:22.3R1 junos:22.4R2 junos:22.4R3
PR Number
Synopsis
Category: Multicast for L3VPNs
1747703
The MVPN traffic starts dropping after RE switchover
Product-Group=junos
On all Junos and Junos Evolved platforms with Dual RE and MVPN ((Multicast Virtual Private Network) enabled, when the user initiates a GRES ( Graceful Routing Engine Switchover) switchover, it triggers a route change from the MVPN . During this process, there's a gap where traffic loss is observed because the flood next hop pointed to by the route gets deleted.
Resolved In:
evo:24.2R1-EVO junos:22.4R3-S3 junos:24.2R1
PR Number
Synopsis
Category: "ifstate" infrastructure
1767098
Prolonged SNMP polling leads to kernel crash in SCU/DCU scenario
Product-Group=junos
On all Junos platforms with SCU (Source Class Usage)/DCU (Destination Class Usage), SNMP (Simple Network Management Protocol) polling continuously for a longer duration will crash the kernel and affect network traffic.
Resolved In:
junos:22.1R3-S5 junos:22.2R3-S3 junos:22.3R3-S2 junos:22.4R3 junos:23.2R2 junos:23.4R1 junos:23.4R2 junos:24.1R1
PR Number
Synopsis
Category: PFE Peer Infra
1801535
CPU usage gets spiked for eventd due to flooding of pfe_khms_spurious_wakeup log
Product-Group=junos
On all Junos platforms, CPU usage gets spiked for eventd due to flooding of pfe_khms_spurious_wakeup log. This log is not an error log but still printed under LOG_ERROR and flooded with default log level. This causes restart which will impact normal user traffic.
Resolved In:
evo:23.4R2-EVO evo:24.2R1-EVO junos:22.2R3-S4 junos:22.3R3-S3 junos:22.4R3-S3 junos:23.4R2 junos:24.2R1 junos:24.3R1
PR Number
Synopsis
Category: Kernel Stats Infrastructure
1766061
MPC7E Stout PMB requires C-state, Power-Save, to be disable to prevent crash
Product-Group=junos
MPC7E (MPC7E-10G and MPC7E-MRATE) may experience unexpected reset with or without memory single bit correctable error. It is typically seen on an FPC where CPU can be idle , so the fix is to disable C-state( Power-Save) in order to prevent MPC from rebooting.
Resolved In:
junos:21.4R3-S7 junos:22.2R3-S3 junos:22.4R3-S2 junos:23.2R2
PR Number
Synopsis
Category: Kernel Tunnel Interface Infrastructure
1795218
JUNOS_REG: MX : With the GR interface configured, ASIC error at PFE can trigger vmcore on backup.
Product-Group=junos
With the GR interface configured, ASIC error at PFE can trigger vmcore on backup.
Resolved In:
evo:23.4R2-EVO evo:24.2R1-EVO evo:24.3R1-EVO junos:24.2R1 junos:24.3R1
PR Number
Synopsis
Category: QFX L2 PFE
1711860
The dcpfe process will crash due to memory fragmentation
Product-Group=junos
On Junos and Junos OS Evolved platforms, the dcpfe (Dense Concentrator Packet Forwarding Engine) process crash will be observed due to memory fragmentation issue. This is a very rare case and would impact traffic as due to dcpfe failure the PFE restarts, so the interfaces will flap.
Resolved In:
evo:23.4R1-EVO junos:23.4R1
1794496
[dot1x] [all] QFX5120-48Y :: JUNOS_REG:QFX5120-48Y:Dot1x interface details not as expected after configuring dot1x client stream in multiple administrative-mode
Product-Group=junos
JUNOS_REG:QFX5120-48Y:Dot1x interface details not as expected after configuring dot1x client stream in multiple administrative-mode
Resolved In:
PR Number
Synopsis
Category: QFX EVPN / VxLAN
1808550
Traffic loss occurs when the layer 3 interface is deleted
Product-Group=junos
On all Junos QFX5K platforms, traffic loss happens and the layer 3 interface cannot be deleted when many routes use the same layer 3 interface. QFX5K is encapsulating the packets with the wrong DMAC(destination MAC ) and VNID(virtual network identifier) for a few IP addresses after disabling the interface.
Resolved In:
junos:23.4R2 junos:24.2R1 junos:24.2R2 junos:24.3R1
PR Number
Synopsis
Category: show route table commands, tracing, and syslog facilities
1754845
cRPD: Remove the unsupported route-record knob from routing-options config hierarchy
Product-Group=junos
Route recording is not supported on cRPD, so the related config knob "route-record" present under routing-options has now been removed.
Resolved In:
evo:23.3R1-EVO evo:23.3R2-EVO evo:23.4R1-EVO junos:23.3R1 junos:23.3R2 junos:23.4R1
PR Number
Synopsis
Category: ZT/YT pfe firewall software
1802341
Filter will be configured with incorrect vlan-IDs and commit error will not be displayed
Product-Group=junos
On mx10008 platform, filter will be configured with incorrect vlan-IDs and commit error will not be displayed if vlan-ID is not configured in the range of 0-4095 which is syntactically incorrect.
Resolved In:
evo:23.4R2-EVO evo:24.2R1-EVO evo:24.3R1-EVO junos:23.4R2 junos:24.2R1 junos:24.3R1
PR Number
Synopsis
Category: ZT/YT LUSS SW driver
1765394
Fatal(MQSS and XQSS errors) error on FPC leads to PIC card offline and traffic impact
Product-Group=junos
On Junos MX304 and MX platforms with LC9600 linecards, With the current error handling mechanism upon receiving fatal error on Flexible pic concentrators(FPC), leads to disable both the Packet Forwarding Engine(PFE) on a Physical Interface Cards(PIC) card and seen traffic impact.
Resolved In:
evo:24.1R1-EVO junos:24.1R1
PR Number
Synopsis
Category: Trio pfe qos software
1797119
Cos wildcard configuration guideline
Product-Group=junos
As per the current cos design, we aren't merging the configuration from wildcard and explicit configurations, instead explicit configs takes precedence and we don't apply the wildcard configs.
Resolved In:
PR Number
Synopsis
Category: Trio pfe bridging, learning, stp, oam, irb software
1766471
PCT-VIRTUAL: Firewall filter counters are not incremented as expected when filter is applied to IRB interface in the ingress/egress direction via forwarding table
Product-Group=junos
PCT-VIRTUAL: Firewall filter counters are not incremented as expected when filter is applied to IRB interface in the ingress/egress direction via forwarding table
Resolved In:
PR Number
Synopsis
Category: Trio pfe l3 forwarding issues
1765856
MFT-SP-MPLS: FRR: Traffic loss observed with PNH, when the IFD is brought back up again after FRR trigger and topo converged
Product-Group=junos
On MX platform with a combination of MPC1-9, LC480, LC2101, and MPC10E, MPC11E, LC9600 line cards, when preserve-nexthop-hierarchy knob enabled and maximum-ecmp configured with more than 32 next-hops in the MPLS FRR (Multiprotocol Label Switching fast-Reroute) and BGP (Border Gateway Protocol) Multipath scenario, packet loss when primary path is added back in ECMP nexthop (say after primary interface or session is marked UP) will be higher compared to that on MX platform with MPC1-9, LC480, LC2101 line cards only, OR with MPC10E, MPC11E, LC9600 line cards only. This packet loss is proportional to the value in maximum-ecmp configuration.
Resolved In:
PR Number
Synopsis
Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1717954
VMX :: [PRedator] JDI-REG : Trans-PR : cscript core @ PyEval_EvalFrameEx, function_code_fastcall, _PyFunction_FastCallKeywords
Product-Group=junos
VMX :: [PRedator] JDI-REG : Trans-PR : cscript core @ PyEval_EvalFrameEx, function_code_fastcall, _PyFunction_FastCallKeywords
Resolved In:
Modification History
2024-06-19 - Correct typos
First publication 2024-06-17
23.2R2-S1: Software Release Notification