Alert Type

SRN - Software Release Notification
Low/NotificationSoftware Release Notification
Low/NotificationSoftware Release Notification

Product Affected

ACX EX MX NFX PTX QFX SRX vSRX

Alert Description

Junos Software Service Release version 24.2R1-S2 is now available for download from the Junos software download site

Download Junos Software Service Release:

  1. Go to Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts

NOTE: Starting on August 30th, 2024, we include PR's severity with each entry. See KB86335 [juniper.net] for the definition of PR's Severity

Solution

Junos Software service Release version 24.2R1-S2 is now available.

24.2R1-S2 - List of Fixed issues

PR NumberCategory: NFX Dual CPE software category
1794559
Critical		When HA is enabled on NFX150/250/350 and fabric links are configured, the fabric link monitored status is 'Down' leading to 'FL' HA status.
PR NumberCategory: SRX Fleming L2NG platform support
1804268
Major		MVRP registration is not working for dynamically created vlan, this issue is generic and applicable to SRX1600, SRX2300 and SRX4300 in switching mode with MVRP protocol.
PR NumberCategory: "agentd" software daemon
1817267
Major		GNMI telemetry streaming of Decimal64 data types should stream double_val types instead of float_val types. GNMI has decremented the use of float_val and Decimal64 types in favor of double_val types for floating point data.
PR NumberCategory: Interface related area
1809220
Major		On Junos SRX5400/5600/5800 platforms in cluster, with 40G interface in layer 2 (L2) transparent mode, when the chassis failovers, the interfaces on node0 will remain in a down state and will not come up. The same issue can also occur when node1 failovers to node0.
PR NumberCategory: Border Gateway Protocol
1818545
Major		On all Junos and Junos OS Evolved platforms, traffic coming in with the BGP-LU label can drop post link-failure when BGP-LU (Border Gateway Protocol-Labeled-Unicast) with 'per-prefix-label' and IGP TI-LFA (Topology-Independent Loop-Free Alternate) is enabled.
1823612
Major		An Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, logically adjacent BGP peer sending a specifically malformed BGP packet to cause rpd to crash and restart, resulting in a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition.. Please refer to https://supportportal.juniper.net/JSA92870 [juniper.net] for more information.
PR NumberCategory: BBE Remote Access Server
1812697
Major		On Junos Evolved platforms, after device has finished booting up with Zero Touch Provisioning (ZTP), authd process will crash and generate a core file.
PR NumberCategory: MX Platform SW - FRU Management
1801284
Major		On MX platforms with SCBE3-MX (MX240, MX480 and MX960) due to a hardware failure of the Control Board, the Routing Engine(RE) switchover might not happen. This will result in the 19.4Mhz clock failure and has potential risk for chassis wide traffic impact. In worst case all revenue ports will be impacted. If the RE switchover is done in a timely manner then the device will recover because FPCs will try using the 19.4Mhz clock from the new master.
PR NumberCategory: Class of Service
1828018
Major		An unrelated commit will trigger flap of protocol adjacencies (BFD, LFM, LACP, etc.) over aggregated Ethernet interfaces if scheduler-map is attached to aggregated Ethernet interfaces (this commit shouldn't necessarily be the first, but it may be). The issue is typically seen only once, the subsequent commits do not trigger further flaps, unless child links of the affected aggregated Ethernet interfaces flap.
1836528
Minor		On all Junos and Junos Evolved Platform, forwarding-class (FC) identifier (id) goes out of sync between the Routing Engine (RE) and Packet Forwarding Engine (PFE) when software upgrade is performed. When In Service Software Upgrade (ISSU) is performed, FC id goes out of sync between the RE and PFE impacting all class-of-service (CoS) features using FC id. When manual software upgrade is performed (without using ISSU) , this issue will be seen as a cosmetic display issue where the order in which the FC configurations are displayed will differ.
PR NumberCategory: QFX Access Control related
1819462
Major		In all Junos platforms supporting 802.1X authentication, when a supplicant client attempts to authenticate using an EAP (Extensible Authentication Protocol) - TLS (Transport Layer Security) certificate, and the user-name is left empty on the client's configuration, the authenticator receives an EAP-Response/Identity message with an empty user-name and the authd process rejects this message setting the port status to HELD, preventing access to network.
1822101
Major		All Junos and Junos Evolved platforms the RAIDUS (Remote Authentication Dial-In User Service) attribute NAS-Port-Type which specifies the type of physical port that the network access server (NAS) uses to authenticate the subscriber is missing in the authentication attempt.
PR NumberCategory: OpenSSL and related subsystems
1815253
Major		The OpenSSL project has published security advisories for multiple vulnerabilities. Please refer to https://supportportal.juniper.net/JSA88107 [juniper.net] for more information.
PR NumberCategory: DNS features related issues.
1816951
Minor		On SRX and vSRX platforms, when unified policy ( dynamic applications) is configured along with DNS profile configuration, a crash is observed.
PR NumberCategory: EVPN ELAN/E-TREE
1852905
Major		On platforms ACX710048L-K & ACX710032C-K, Ethernet Virtual Private Network (EVPN) protocol is not allowed to be configured through CLI.
PR NumberCategory: Manageability for Node Virtualization
1842451
Major		When trying to console into the GNF using a non-root user in Juniper Device Manager JDM users are not able to console
PR NumberCategory: Ethernet OAM (LFM)
1811734
Major		On Junos ACX5448 & ACX710 platforms with LFM (Link-fault-management) configured in distributed mode, the LFM session flaps will be seen at random when the peer device has LFM configured in inline mode. This will result in traffic loss.
PR NumberCategory: jdhcpd daemon refactored for evo
1816246
Major		Under certain conditions, the DHCP session database becomes unstable or JDHCPD not getting IFL/IFD events which cause DHCP packets to fail to route to the kernel and then leads to DHCP packet drop.
PR NumberCategory: AAA, auditd issues
1825303
Major		In all Junos and Junos Evolved platforms, if the full name of the local user's account is configured with a very long character string, then the user is logged out with a "connection closed" message when attempting to authenticate against the local account. No other user will be able to authenticate using the local account database. Issue has been seen with character string with length 1659.Users already logged in when the issue arises are not affected.
PR NumberCategory: mgd, ddl, odl infra issues
1825793
Minor		"show system configuration rescue" may show strange "Last changed" timestamp. It may happen under any time zone potentially and looks like there are some patterns. In case of "Asia/Tokyo", Last changed timestamp may show "1970-01-01 08:59:59 JST".
PR NumberCategory: EX interfaces issues
1836616
Major		On certain EX platforms with devices connected to 10G capable multirate ports (MGE interface) and with auto-negotiation enabled when the speed is negotiated to 5G, no traffic flows as no MAC addresses are learnt on the port.
PR NumberCategory: LC4800 specific Chassis and Linecard software
1770642
Major		On MX platforms with LC4800, the max allocated power numbers are lower than the recommended values. Actual values should be 966W (25C) , 1005W (40C), & 1030W (55C). The allocated power is 33W less than what actual power is supported.
1824343
Major		On MX platforms when LC4800, the fan speed at 25C ambient temperature may exceed 44% of the max speed target. Therefore the system may not meet NEBS acoustic requirements.
PR NumberCategory: Integrated Routing & Bridging (IRB) module
1834886
Major		On MX304 platform, IRB (Integrated Routing and Bridging) interface units above 16385 cannot be configured using dot (.) command. The knob 'unit' has to be used for a successful configuration of IRB interface units above 16385.
PR NumberCategory: Layer2 forwarding on EX/NTF/PTX/QFX
1816049
Major		On all Junos and Junos Evolved platforms, when "set vlans switch-options interface-mac-limit packet-action drop-and-log" is configured, changing the Virtual Local Area Network (VLAN) description will cause flush of Media Access Control (MAC) addresses learnt on the interfaces part of the VLAN and traffic impact
1822911
Major		On all Junos platforms configured in EVPN (Ethernet Virtual Private Network) scenario with AE (Aggregated Ethernet) interface and esi "auto-derive type-3-system-mac" knob, if an IRB (Integrated Routing and Bridging) interface is activated or deactivated the link aggregation interfaces ( IFL) will get flapped due to which interface traffic gets impacted.
PR NumberCategory: lldp sw on MX platform
1811545
Major		When LLDP is configured on interface all and there are AE interfaces configured, to disable LLDP on one of the AE "set protocols lldp interface is done". To enable it back when rollback is done for reverting disable config, AE is not participating in LLDP neighborship and this happening because PFE stopped sending packets to control plane because on rollback L2CPD did not sent LLDP ENABLE for its child interface to PFE and LLDP on child interface was still set to disabled for PFE.
PR NumberCategory: FreeBSD Kernel Infrastructure
1818063
Major		On all Junos platforms with FreeBSD15 The error message "tar: Failed to set default locale" will be seen during the USB installation. This is just an error message and has no impact on USB installation.
PR NumberCategory: QFX EVPN / VxLAN
1842475
Major		On Junos OS QFX5k and EX4k platforms having EVPN-VxLAN (Ethernet VPN - Virtual Extensible Local Area Network) configured, traffic drops are observed due to missing hardware programming caused by stale hardware entries leading to VTEP (Virtual Tunnel Endpoint) Destination IP-address is not updated properly. The issue is observed due to VPLAG (Virtual Chassis Port Link Aggregation) flaps (any incident, such as a reboot of the gateway device / remote device) causes VPLAG to uninstall and install.
PR NumberCategory: QFX5200/5110/5120/5210 Platfom issues
1758868
Major		The Port interface is set wrong on 100G optics on QFX5200-32C platform.
PR NumberCategory: SRX branch platforms
1803966
Major		On the SRX300 series platforms and SRX550 supporting the LTE Mini-Physical Interface Module (Mini-PIM), the cellular interface (cl) goes down when the dialer interface (dl) interface is disabled for link failover.
1811858
Major		After CTL link down, Monitored-Status in "show chassis cluster interfaces" keeps showing "Up" state.
1821344
Major		On branch SRX 300, 320, 340, 345, 380 platforms an upgrade/downgrade from Junos OS 22.4R3 or above versions, may fail to boot OS and get a loader prompt when via CLI command and with using partition option.
1821368
Major		On SRX380 platform, when a DAC interface is admin disabled, the DAC interface does not send a fault signal to a peer device and on peer device it will reflect as up.
1827123
Major		On the SRX 3xx series the root user does not get logged out from the shell mode even though the session logout time is configured. There is no traffic impact because of this issue, however, this is unexpected behaviour and not seen on other platforms.
1841080
Major		On SRX380 platforms configured for packet-mode operation and an IP address is assigned to xe (10 Gigabit ethernet) interfaces, the interface link status will go to down state.
PR NumberCategory: SRX-1RU platfom related protocol, QoS, filtering features et
1819376
Major		On SRX4600 platform, upgrading from any earlier release to Junos 23.2R2 or later whether via ISSU (in-service software upgrade) or a standard upgrade process can cause the 1G interfaces to go down when the speed is changed from 10G to 1G. As a result, the port fails to activate properly at 1G, remaining down and unable to transmit any traffic.
PR NumberCategory: Trio pfe l3 forwarding issues
1813253
Major		On all Junos MX150 platforms, firewall terms with syslog or logging may cause an mbuf (memory buffer) memory leak, resulting in an FPC crash.
1841876
Major		In different MX series routers references, when Q-in-Q is configured with outer Vlan Tag protocol ID (TPID) different than 0x8100, the traffic is lost and will not find its destination.
PR NumberCategory: Authentication, Authorization, Accounting, PAM (RADIUS/tacplus)
1802329
Major		An Authentication Bypass by Spoofing vulnerability in the RADIUS protocol of Juniper Networks Junos OS and Junos OS Evolved platforms allows an on-path attacker between a RADIUS server and a RADIUS client to bypass authentication when RADIUS authentication is in use. Please refer to https://supportportal.juniper.net/JSA88210 [juniper.net] for more information.
PR NumberCategory: Configuration mgmt, ffp, load-action, commit processing
1818692
Major		Core dumps in mustd seen commiting a change to a large prefix-list used by BGP
1829886
Major		Commit error check-out failed does not get triggered when a complete bridge-domain is configured in instance-type vrf.
PR NumberCategory: Ephemeral Database
1839322
Major		On EX-series platforms running Junos Operatin System (OS), configured as a Virtual Chassis (VC) with an ephemeral database (DB) and commit sync enabled, executing the commit-syncd process creates a configuration file that is reused for commits on other VC members. In the problematic scenario, the configuration file is missing during the second iteration, leading to a commit-syncd core without impacting the device.
PR NumberCategory: UI Infrastructure - mgd, DAX API, DDL/ODL
1821845
Major		On all Junos and Junos OS Evolved platforms when the 'edit system scripts' hierarchy configuration is changed using loading a configuration from a file or the terminal using 'load' option, the scripts refresh will fail.
1825728
Minor		On all Junos and Junos Evolved platforms, the mgd process crashes when device has an ephemeral configuration database instance and an FQDN (Fully Qualified Domain Name) is used for NTP (Network Time Protocol), radius-server, tacplus-server, etc. in either the main static configuration or the ephemeral configuration database.
1827506
Major		MGD core upon startup followed by flood of 'could not add xml command' messages when upgrading to 24.2R1-S1 if "system configuration-database extend-size" knob is used
1842518
Major		On all Junos/Junos OS Evolved platforms, the device becomes unresponsive due to management (mgd) processes being stuck in a deadlock. This leads to the piling up of mgd processes, which eventually exhausts the maximum process limit (maxproc) on the device. The impact is that the device will become unusable due to the maxproc limit being reached.
PR NumberCategory: Issues related to Logging/Tracing, errmsg, eventd infrastruc
1795952
Major		When traceoptions is enabled for event-options, eventd crash may be observed.
PR NumberCategory: Issues related to NETCONF
1800859
Major		On all Junos and Junos OS Evolved platforms, RPC command with default-operation replace uses load update instead of load override from Junos 21.1 onwards. Policies could get incorrectly reordered impacting traffic, because load update does not honor the replace: tag present in configuration file loaded.
1811327
Major		Union replace operation fails if the configuration being replaced doesn't exist on the device
1819656
Major		In all Junos and Junos OS Evolved platforms with MNHA (Multinode High Availability) supported and "set system commit peers-synchronize" is configured in a local primary node of the HA, when the "commit" command is issued, a synchronization warning message is displayed informing that session to peer (backup) has failed and configuration is committed only in the local primary device. Under the same configuration, if the command "commit peers-synchronize" is used instead of "commit", then the synchronization error will cause the configuration to not be committed on any of the high availability nodes. This issue does not affect network services. The synchronization error is caused by a TACACS authentication failure when primary node attempts to access the secondary backup node.
PR NumberCategory: Issues related to YANG Data Models
1826630
Major		When the YANG(Yet Another Next Generation)-compliant knob is configured, annotations containing non-alphanumeric characters are written as-is, instead of being escaped into their corresponding formats.
PR NumberCategory: Virtual Router Redundancy Protocol
1822867
Major		On all Junos and Junos Evolved platforms configured with VRRP (Virtual Router Redundancy Protocol) and NSR (Non-Stop Routing), after RE switchover or GRES (Graceful Routing Engine Switchover) the master router would starts sending VRRP advertisements with a different priority value. As a result, both the master and backup VRRP routers will begin operating as the master which results in inconsistent traffic routing or packet loss as the system fails to establish a single master node.
PR NumberCategory: Windsurf fabric software
1835860
Major		On MX2010/MX2020 platforms having adapter cards MPC7E and MPC5E with SFB3 (Switch Fabric Boards), the alarm "Check plane * Fabric Chip" is seen when both the ADC cards are restarted, which then causes a fabric link error on the adjacent ADC slot. As a result, traffic drop is observed for FPC (Flexible Physical Interface Cards Concentrators)/PFE (Packet Forwarding Engine) plane combination for which the error is reported.
PR NumberCategory: Track Windriver Linux issues
1631579
Critical		A system equipped with specific line cards, the line cards will be stuck in the 'Present' state and later go 'Offline' after the line card or router is rebooted. Ideally, the Line Card should go 'Online' instead it goes 'Offline'.
PR NumberCategory: QFX10002 Platform
1818082
Critical		On QFX10002-60C system with densely populated transceivers, all ports configured as 10G, random odd ports link failures after reboot or image install.

 

 

24.2R1-S2 - List of Known issues

PR NumberCategory: NFX Layer 3 Features Software
1807923
Minor		The ipsec knob. was hidden in 24.1I-20240327.0.1131.

Resolved In: junos:24.2R2 junos:24.3R1 junos:24.4R1
PR NumberCategory: NFX Series Platform Software
1807738
Major		On Junos NFX350 platforms, the dcpfe process crashes when the device goes for a shutdown or reboot.

Resolved In: junos:24.2R2 junos:24.3R1 junos:24.4R1 junos:25.1R1
PR NumberCategory: EVPN ELAN/E-TREE
1852905
Major		On platforms ACX710048L-K & ACX710032C-K, Ethernet Virtual Private Network (EVPN) protocol is not allowed to be configured through CLI.

Resolved In: junos:24.2R2 junos:24.4R2 junos:25.1R1
PR NumberCategory: Manageability for Node Virtualization
1842451
Major		When trying to console into the GNF using a non-root user in Juniper Device Manager JDM users are not able to console

Resolved In: evo:24.2R2-EVO evo:24.4R1-EVO evo:25.1R1-EVO junos:24.2R2 junos:24.4R2 junos:25.1R1
PR NumberCategory: jdhcpd daemon refactored for evo
1816246
Major		Under certain conditions, the DHCP session database becomes unstable or JDHCPD not getting IFL/IFD events which cause DHCP packets to fail to route to the kernel and then leads to DHCP packet drop.

Resolved In: evo:23.4R2-S4-EVO evo:24.2R1-S2-EVO evo:24.2R2-EVO evo:24.4R1-EVO evo:24.4R2-EVO evo:25.1R1-EVO evo:25.2R1-EVO junos:23.4R2-S4 junos:24.2R2 junos:24.4R1 junos:24.4R2 junos:25.1R1
PR NumberCategory: EX interfaces issues
1580560
Major		On EX2300, EX3400, :EX4300-48MP and EX4300 , Pause frames counters does not get incremented when pause frames are sent.

Resolved In:
1823097
Critical		An FXPC core might be generated when an offline and online activity is performed on a 1x100GE Uplink module. The system resumes in normal fashion after the core

Resolved In:
PR NumberCategory: EX4400 platform
1814463
Minor		Unsupported PEM/PSU is shown as online (green)in the MIST Dashboard and the output of "show chassis environment" for that PSU shows the status as present/OK. No functional impact.

Resolved In: junos:24.2R2 junos:24.4R1 junos:25.1R1
PR NumberCategory: Express PFE FW Features
1830706
Major		On all Junos platforms, when a filter instance is modified or deleted, there should not be any old Packet Forwarding Engine (PFE) instances. However, during these operations, old PFE instances are being incorrectly assigned, resulting in incorrect memory address allocation. This leads to an Flexible PIC Concentrator (FPC) crash after committing the configuration, causing traffic loss.

Resolved In: evo:23.4R2-S4-EVO evo:24.4R2-EVO junos:21.4R3-S10 junos:22.2R3-S5 junos:23.2R2-S3 junos:23.4R2-S4 junos:24.2R2 junos:24.4R2 junos:25.1R1
PR NumberCategory: to track infrastructure replication bugs
1829614
Major		after switchover in MX2010 platform , test config is removed with load update and then rollbacked. during rollback commit , config commit failed with below error: error: commit-check-daemon : Invalid XML from dfwd error: configuration check-out failed

Resolved In: evo:24.2R2-EVO evo:24.4R1-EVO
PR NumberCategory: Kernel software for AE/AS/Container
1840734
Major		On all Junos platforms which support PS over RLT, after modifying or deleting and re-adding a logical interface on RLT interface, the logical interface remains down and the following log messages is seen in the messages log:DCD_CONFIG_WRITE_FAILED: IFL rlt0.0 configuration write failed for an IFL ADD: File exists after configuration change.

Resolved In: evo:23.4R2-S4-EVO evo:24.2R2-EVO evo:24.4R1-EVO evo:25.1R1-EVO junos:23.4R2-S4 junos:24.2R2 junos:24.4R1 junos:25.1R1
PR NumberCategory: IoT data filtering/streaming
1830246
Major		On SRX platforms when the dynamic filter is configured, the packet forwarding engine (PFE) crashes, impacting traffic.

Resolved In: junos:22.4R3-S5 junos:23.2R2-S3 junos:24.2R2 junos:24.3R1 junos:24.4R1
PR NumberCategory: Integrated Routing & Bridging (IRB) module
1827648
Major		On all Junos QFX series platforms in an EVPN (Ethernet Virtual Private Network) VXLAN (Virtual Extensible Local Area Network) setup with CRB (Centralized Routing Bridge) architecture, ARP packets are not being learned, leading to traffic forwarding issues. This problem arises when ARP packets are sent from the firewall to the spine switches. The issue is linked to IRB (Integrated Routing and Bridging) handling and bridge domain re-incarnation, which triggers ARP request failures and impacts L3 forwarding.

Resolved In: junos:21.4R3-S10 junos:22.2R3-S5 junos:23.4R2-S4 junos:24.2R2 junos:24.3R1 junos:24.4R1 junos:25.1R1
PR NumberCategory: RPM, TWAMP feature related to SRX specific design
1830290
Major		On SRX4600 platforms when Real-time Performance Monitoring (RPM) related configuration is committed, 'gencfg no msg handlers for gencfg msg' log messages will be generated. This will not have any functional impact.

Resolved In: junos:21.4R3-S10 junos:22.2R3-S6 junos:22.4R3-S6 junos:23.4R2-S4 junos:24.2R2 junos:24.4R1 junos:25.1R1
PR NumberCategory: Layer 2 Circuit issues
1834625
Major		MPLS LSP tied to an l2circuit is not honoring the configured transport class

Resolved In: evo:24.2R2-EVO evo:24.4R1-EVO evo:25.1R1-EVO junos:24.2R2 junos:24.4R1 junos:25.1R1
PR NumberCategory: MPC11 ULC fabric software related issues.
1807410
Critical		On MX2020 and MX2010 platforms, during fabric link training, if the SFB (Switch Fabric Board) suddenly shuts down due to a power off or being unplugged at a specific moment, a SPMB (Switch Processor Mezzanine Board) crash can be seen. It is a timing issue

Resolved In: junos:21.2R3-S8-J6 junos:21.2R3-S9 junos:21.4R3-S7-J4 junos:23.2R2-S3 junos:23.4R2-S4 junos:24.2R2 junos:24.3R1 junos:24.4R1
1812046
Minor		Once SFB2 or SFB3 or plane is manually offline in an attempt to recover from a Fabric Training Failure of one FPC, the neighbor slot FPC is not be able to stop the high speed link and is ending up with training failure as well.

Resolved In: junos:21.2R3-S9 junos:22.2R3-S3-J3 junos:23.4R2-S4 junos:24.2R2 junos:24.3R1 junos:24.4R1
PR NumberCategory: Resource Reservation Protocol
1833448
Major		On all Junos and Junos Evolved Platforms, an MPLS-TE (Traffic Engineering) interoperability problem exists where Juniper routers misinterpret ZTE's RSVP (Resource Reservation Protocol) Detour backup protection signals, causing unnecessary facility backup attempts and inefficient resource usage. This only impacts networks with both Juniper and ZTE equipment.

Resolved In: evo:24.2R2-EVO evo:25.1R1-EVO junos:24.2R2 junos:25.1R1
PR NumberCategory: IPSEC functionality on M/MX/T ser
1825835
Major		On MX platforms with MS-MPC/MS-MIC with IPsec (Internet Protocol Security) configured, IPsec traffic loss will be observed if an SA (Security Association) deletion request is sent by the peer just before the SA installation is completed. The issue happens in the scale scenario (4000 tunnels are configured, and when the SA count reaches up to 3900).

Resolved In: junos:21.2R3-J14 junos:21.2R3-S8-J10 junos:21.4R3-S9 junos:22.4R3-S5
PR NumberCategory: SRX branch platforms
1838853
Major		On all Junos SRX platforms, Intrusion Detection and Prevention(IDP) signature offline download fails. This impacts the offline download of security packages.

Resolved In: junos:24.2R2 junos:24.4R1 junos:25.1R1
PR NumberCategory: Trio pfe l3 forwarding issues
1822793
Major		On Junos MX series platforms with preserve nexthop hierarchy knob enabled in setup having a mix of MPC10, MPC11 or LC9600 cards and MPC1-9 line card, BUM (Broadcast, unknown-unicast and multicast) traffic can be dropped for few flows. This occurs because the forwarding path detects a mismatch in the distribution pattern for these flows, resulting in packet loss.

Resolved In: evo:24.2R2-EVO evo:24.3R1-EVO evo:24.4R1-EVO junos:24.2R2 junos:24.3R1 junos:24.4R1
PR NumberCategory: web filterig issues
1816280
Major		On SRX platforms with UTM (Unified Threat Management) Sophos Anti-virus configured, srxpfe process (SRX Packet Forwarding Engine) crashes resulting in traffic impact due to memory corruption for insufficient buffer size allocation.

Resolved In: junos:23.4R2-S4 junos:24.2R2 junos:24.4R1 junos:25.1R1
PR NumberCategory: MX10K linecard
1809511
Major		On MX platforms with LC2101 line cards and 10-gigabit ethernet interfaces configured in loopback mode, when Line card is booted multiple times, the ethernet interfaces on line card remains down and traffic on those interfaces will be impacted.

Resolved In: evo:24.2R2-EVO evo:24.3R1-EVO evo:24.4R1-EVO junos:21.4R3-S10 junos:23.4R2-S4 junos:24.2R2 junos:24.3R1 junos:24.4R1
PR NumberCategory: usf flow and datapath issue on SPC3
1841859
Major		On all MX Junos devices with SPC3, on receiving bursty traffic PIC may go down and cause network disruption.

Resolved In: junos:21.4R3-S10 junos:22.2R3-S6 junos:22.4R3-S6 junos:23.2R2-S3 junos:23.4R2-S4 junos:24.2R2 junos:24.4R1 junos:25.1R1

 

Modification History

First Publication 2025-01-08