Alert Type
SRN - Software Release Notification
Risk
Risk Description
Low/Notification
Junos Evolved software release notification
Impact
Impact Description
Low/Notification
Junos Evolved software release notification
Product Affected
ACX PTX QFX platform running Junos Evolved software
Alert Description
Junos Software Service Release version 23.4R2-S1-EVO is now available for download from the Junos software download site
Download Junos Software Service Release:
Go to
Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select
Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as need and follow the prompts
Solution
Junos Software service Release version 23.4R2-S1-EVO is now available.
23.4R2-S1-EVO - List of Fixed issues
PR Number
Synopsis
Category: PTX10003 Interface related issues
1810718
On PTX10003 4x10GE/4x25GE interface drop the traffic in working lanes when new lane is configured with 400GE as neighbor interface
Product-Group=evo
On PTX10003 platform, whenever there is a change in MTU/VLAN configuration or bouncing interface channel 2/3 of 4x10GE or 4x25GE and if the immediate neighbor port is configured with 400GE, it leads to packet drop on 4x10GE and 4x25GE interfaces and issue is not observed when the immediate neighbor port is configured with 100GE.
PR Number
Synopsis
Category: EVO Layer-2 switching for BCM XGS Platforms
1818577
BFD session flap upon FW filter terms update
Product-Group=evo
On the QFX5130-32CD platform, upon adding/removing new (IRB interfaces or BGP peers) to the configuration and committing the existing BFD sessions flaps and hence the BGP sessions flap.
PR Number
Synopsis
Category: PFE L2 forwarding features on BT based platforms
1809423
Interfaces take a long time to come up after reboot when configured in scaled IFL environment
Product-Group=evo
On Junos OS Evolved PTX10001-36MR/PTX-10002-36QDD/PTX10004/PTX10008/PTX10016 platforms with scaled L2 & L3 IFLs (Interface Logical Device) the boot time i.e., interfaces to come up will be around 25-30 mins.
PR Number
Synopsis
Category: Express BT PFE L3 Features
1784498
Higher AE traffic convergence observed in ALB configured AE interface
Product-Group=evo
On PTX10001-36MR/PTX10004/PTX10008 and PTX10016 platforms, if Adaptive load balancing (ALB) is configured on AE (Aggregated Ethernet) interface and link up/down, the AE interfaces will take higher traffic convergence during FRR (Fast Reroute) compared to regular AE.
PR Number
Synopsis
Category: Dynamic rendering infrastructure
1745615
Telemetry data is not exported in an IS-IS scaled Segment Routing scenario
Product-Group=evo
On all Junos and Junos OS Evolved platforms configured with SR-ISIS and with gRPC/gNMI telemetry, subscription to the path: "/junos/services/segment-routing/sid/usage/" will not work and the output could not be proper. The issue could happen only in scaled configuration (Approximately, 4000 or more per-sid ingress sensors and 4000 or more IPv4/IPv6 per-sid egress sensors are configured).
PR Number
Synopsis
Category: management ethernet related issues - mgmt-ethd daemon
1796934
legacy inet6 address seen under vmb0 while modifying mgmt-0 IPv6 address with dadfailed
Product-Group=evo
In case of master-only inet6 address uses for re[01]:mgmt-0 interfaces, if there is inet6 address modification, the legacy inet6 address might still reside when do "ip -6 add show dev vmb0" under OS shell. The output of CLI command "show interfaces re[01]:mgmt-0" shows the inet6 address correctly.
PR Number
Synopsis
Category: jdhcpd daemon refactored for evo
1730717
We may encounter jdhcpd core during initialization. The core in rare, and there is no service impact because of this core (as the process recovers immediately)
Product-Group=evo
We may encounter jdhcpd core during initialization. The core in rare, and there is no service impact because of this core (as the process recovers immediately)
PR Number
Synopsis
Category: SNMP, mib2d issues
1814315
There is no option for inband management through SNMPv3 on an interface configured with non-default routing instance
Product-Group=evo
On all Junos Evolved platforms, the routing instance needs to be specified in the snmpv3 query with -n option for the query to be successfully served.
1815524
The mib2d crash is observed on Junos OS Evolved platforms with duplicate SNMP request
Product-Group=evo
On Junos OS Evolved platforms, the mib2d process crashes when SNMP get request is performed for duplicate OIDs.
PR Number
Synopsis
Category: Flow Module
1817211
On SRX Series devices, when using IPv6 Multi-path BGP with MX configured with EVPN, transit SFW traffic experiences packet drops during IPv6 Neighbor discovery refresh.
Product-Group=evo
On SRX Series devices, when using IPv6 Multi-path BGP with MX configured with EVPN, transit SFW traffic experiences packet drops during IPv6 Neighbor discovery refresh.
PR Number
Synopsis
Category: Platform infra to support jvision
1817967
Product annotation missing for sensors for specific platforms
Product-Group=evo
Product annotation files with correct product support/exclude information for specific sensors with respect to platform MX, PTX and EX92XX products. Request customer to enable CLI "set services analytics product-path-check no-path-check" configure to override product annotation issue.
PR Number
Synopsis
Category: Protocol Independant Multicast
1819741
PIM Prune is not sent to upstream
Product-Group=evo
With RPF-vector TLV PIM prune message might not be sent out of upstream interface when corresponding prune message received from last downstream interface (i.e. S, G state needs to be removed).
PR Number
Synopsis
Category: RPD Next-hop issues including indirect, CNH, and MCNH
1778103
RPD core can be see when running Telemetry for protocols from top of tree and doing routing instance add delete operation
Product-Group=evo
RPD core can be see when running Telemetry for protocols from top of tree and doing routing instance add delete operation
PR Number
Synopsis
Category: RPD route tables, resolver, routing instances, static routes
1807037
BGP backup routes are installed as primary routes after enabling 'protect core' feature
Product-Group=evo
On all Junos and Junos OS Evolved platforms when Border Gateway Protocol (BGP) multipath is enabled for Layer 3 Virtual Private Network (L3VPN) routes and 'protect core' is enabled on the Virtual Routing and Forwarding (VRF) instance, the backup BGP path is installed as primary path. The Next hop weight value is not updated correctly, it is weight 0x1 instead of weight 0x4000 for the backup.
PR Number
Synopsis
Category: Issues related to control plane security
1741624
Junos OS Evolved: A high rate of SSH connections causes a Denial of Service (CVE-2024-39562)
Product-Group=evo
A Missing Release of Resource after Effective Lifetime vulnerability the xinetd process, responsible for spawning SSH daemon (sshd) instances, of Juniper Networks Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service (DoS) by blocking SSH access for legitimate users. Continued receipt of these connections will create a sustained Denial of Service (DoS) condition. Please refer to https://supportportal.juniper.net/
JSA75724
[juniper.net]
for more information.
PR Number
Synopsis
Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1821845
The system scripts refresh will fail when using load CLI option
Product-Group=evo
On all Junos and Junos OS Evolved platforms when the 'edit system scripts' hierarchy configuration is changed using loading a configuration from a file or the terminal using 'load' option, the scripts refresh will fail.
PR Number
Synopsis
Category: VCCP for virtual-chassis in MX
1801522
AE child links in back member is in detached state
Product-Group=evo
On Junos MX platforms with MPC10E-10C card platforms, the issue is observed during a VC(Virtual Chassis) sequential upgrade , where AE child links in backup member is in detached state after auto reboot. Hence redundancy is lost
PR Number
Synopsis
Category: ACX7000s hwd/chassisd software
1700839
ACX reports "/psm/0/ hwdre/0/cm/0/ psm_mcu /psm0/psm_cml_cmd_fault" even though the PSM is in working order
Product-Group=evo
ACX reports "/psm/0 /hwdre/0 /cm/0 /psm_mcu/ psm0/psm_cml_cmd_fault" even though the PSM is in working order
23.4R2-S1-EVO - List of Known issues
PR Number
Synopsis
Category: PFE L2 forwarding features on BT based platforms
1810348
[evpn_vxlan] [evpn_instance] ptx10001-36mr :: JDI-RCT: Error message observed "RT : Mac Route install failed for rtt table index:452 Mac:0x5e000004 BD:170 ifl:4294967295 error:Generic failure" after performing disable ae member link on TOR device
Product-Group=evo
[evpn_vxlan] [evpn_instance] ptx10001-36mr :: JDI-RCT: Error message observed "RT : Mac Route install failed for rtt table index:452 Mac:0x5e000004 BD:170 ifl:4294967295 error:Generic failure" after performing disable ae member link on TOR device
Resolved In:
evo:24.4R1-EVO
PR Number
Synopsis
Category: Express BT PFE L3 Features
1811245
BGP session on PTX platforms may flap when inline BFD is configured with low BFD timer
Product-Group=evo
On Junos OS Evolved PTX platform, the Border Gateway Protocol (BGP) session flap can be seen when inline Bidirectional Forwarding Detection (BFD) is configured under routing instance without loopback interface (lo0) leading to partial traffic drop. The issue is only seen when the interface is within the routing-instance.
Resolved In:
evo:24.4R1-EVO
PR Number
Synopsis
Category: BX PFE firewall issues
1778622
Transient parity erorr "pp_0_filter_action_0_intr_pmv_eq_zero" might seen, during filter modification with traffic running.
Product-Group=evo
Transient parity erorr "pp_0_filter_action_0_intr_pmv_eq_zero" might seen, during filter modification with traffic running.
Resolved In:
1793356
Filter action decap in egress direction
Product-Group=evo
On Junos OS Evolved platforms, when Configuration of Decap filter action is on egress, commit error on both RE/PFE syslog messages is seen, however there is no service impact due to this issue.
Resolved In:
evo:24.2R1-EVO
PR Number
Synopsis
Category: MX Platform SW - FRU Management
1784438
MX304 not reachable with the power-off failure on the PIC
Product-Group=evo
When an MX304 LMIC is offline due to a power issue, it may take up to 20 minutes for the LMIC to come back online. You can configure event-options to reduce the time to restart the LMIC. See also:
TSB83899
[juniper.net]
Resolved In:
evo:23.2R2-S2-EVO evo:24.2R1-EVO evo:24.2R2-EVO evo:24.4R1-EVO junos:22.4R3-S4 junos:23.2R2-S2 junos:23.4R2-S1 junos:24.2R1 junos:24.2R2 junos:24.3R1
PR Number
Synopsis
Category: ACX7000 BFD specific issues
1812652
ACX7100-not able to have more than 256 single-hop BFD sessions
Product-Group=evo
ACX7100-not able to have more than 256 single-hop BFD session
Resolved In:
evo:23.4R2-S2-EVO evo:24.2R2-EVO evo:24.4R1-EVO
PR Number
Synopsis
Category: Alias for DHCP issue on DNX based platform.
1771121
jdhcpd.re.re0 cored at trace_file_close_internal (traceptr=0x7efc443b2bb0) at ../../src/junos_trace.c:188
Product-Group=evo
When DHCP trace options are enabled, there is a possibility that jdhcpd could core. In general, traceoptions should be enabled only for debugging. They should be disabled once debuffing is done.
Resolved In:
PR Number
Synopsis
Category: EVO Services Jflow PRs for defect & enhancement requests
1816542
A router running sampling may see the msvcs-db daemon run at 99.9% for an extended period
Product-Group=evo
A router running sampling may see the msvcs-db daemon run at 99.9% for an extended period
Resolved In:
evo:21.4X9-EVO evo:23.2R2-J11-EVO evo:24.2R2-EVO evo:24.4R1-EVO
PR Number
Synopsis
Category: Express ptx-evo PFE L3 Features
1816310
VRRP is not working for VRRP group 0 when specific Junos OS Evolved platforms are working as master
Product-Group=evo
VRRP (Virtual Router Redundancy Protocol) will not work when VRRP group 0 is configured and specific Junos OS Evolved platforms (PTX10001/PTX10003/PTX10004/PTX10008/PTX10016) are working as master.
Resolved In:
evo:23.2R2-S2-EVO evo:23.4R2-S2-EVO evo:24.2R1-S1-EVO evo:24.2R2-EVO evo:24.4R1-EVO
PR Number
Synopsis
Category: SNMP, mib2d issues
1788308
[Junos OS Evolved] SNMP cold start trap is not sent out to external server upon system reboot
Product-Group=evo
On Junos OS Evolved platforms, SNMP cold start trap is observed on console log upon system reboot, but it is not sent out to external server.
Resolved In:
evo:24.4R1-EVO junos:24.3R1
1817882
SNMPv3 walk/get query is failing with 'Unknown user name' error after GRES operation when master-only ip configured
Product-Group=evo
Engine-id need to be configured by use-mac-address option before snmpv3 configuration is done on routing engine scenario. set snmp engine-id use-mac-address
Resolved In:
PR Number
Synopsis
Category: EVPN control plane issues
1816672
[Junos OS Evolved] LACP on non-DF ACX router comes out of "out-of-sync" state by deactivating one of the EVPN instances, causing CE device to move to Collecting distributing
Product-Group=evo
There are multiple EVPN instances each having separate IFL of AE IFD. AE is configured with per-esi lacp-oos-on-ndf on the AE IFD. On deactivating one of the instances, LACP on non-DF router comes out of "out-of-sync" state, causing CE device to move to Collecting distributing.
Resolved In:
evo:24.2R2-EVO evo:24.4R1-EVO junos:24.2R2 junos:24.3R1
PR Number
Synopsis
Category: Express PFE CFM
1785008
CFM Inline : AE anchor child interface change , CFM sessions go down
Product-Group=evo
When AE bundle has multiple child links, and thea anchor child link is chaged die to any underlying activity like pfe restart of pfe hosting current anchor child, CFM inline sessions fail to come up on the newly selected anchor child link.
Resolved In:
evo:24.2R2-EVO evo:24.4R1-EVO junos:24.2R2 junos:24.3R1
PR Number
Synopsis
Category: JDHCP is a daemon for EVO platform to handle DHCP protocol
1816246
ACX7509:DHCPv4/v6 Relay subscriber may not login if DHCP configuration is completly removed and readded.
Product-Group=evo
Under certain conditions when DHCP configuration is completely removed Session Database is left in an unusable state. On subsequent reconfiguration of DHCP subscriber logins will fail. In this case a system reboot is required.
Resolved In:
PR Number
Synopsis
Category: Category for QFX5K EVO Platform Software PRs related to Inte
1747315
On QFX5230-64CD 400G DAC cable of 2.5m and 4X100G DAC Break out may not link up with some peer devices
Product-Group=evo
On QFX5230-64CD platform, 400G DAC cable of 2.5m length and 4X100G DAC BO may not link up with some peer devices. This issue is not seen with all peer devices. If this happens, please replace the 2.5m cable with a 1m DAC cable or use supported 400G Optics instead.
Resolved In:
PR Number
Synopsis
Category: Category for QFX5K EVO Platform Software PRs related to Chas
1816064
QFX5130-48C QFX5130-48CM: In rare cases, "FPC 0 Volt Sensor Fail" or "FPC 0 Voltage Threshold Crossed" alarm seen after bootup
Product-Group=evo
In rare cases, "FPC 0 Volt Sensor Fail" or "FPC 0 Voltage Threshold Crossed" alarm is seen after bootup on QFX5130-48C/QFX5130-48CM.
Resolved In:
evo:24.4R1-EVO
PR Number
Synopsis
Category: Trio LU and LUSS SW driver
1735490
Junos OS: MX Series: Continuous subscriber logins will lead to a memory leak and eventually an FPC crash (CVE-2024-39539)
Product-Group=evo
A Missing Release of Memory after Effective Lifetime vulnerability in Juniper Networks Junos OS on MX Series allows an unauthenticated adjacent attacker to cause a Denial-of-Service (DoS). Please refer to the https://supportportal.juniper.net/
JSA82999
[juniper.net]
for more information.
Resolved In:
evo:22.4R3-EVO evo:23.1R2-EVO evo:23.2R2-EVO evo:23.3R1-EVO evo:23.4R1-EVO junos:19.1R3-S12 junos:19.2R3-S9 junos:19.3R3-S10 junos:19.4R3-S13 junos:20.2R3-S9 junos:20.3X75-D36 junos:20.3X75-D52 junos:20.4R3-S9 junos:21.2R3-S6 junos:21.4R3-S6 junos:22.1R3-S5 junos:22.2R3-S3 junos:22.3R3-S2 junos:22.4R3 junos:23.1R2 junos:23.2R2 junos:23.3R1 junos:23.4R1
Modification History
First publication 2024-08-19
23.4R2-S1-EVO: Software Release Notification for JUNOS Evolved Software