Alert Type

SRN - Software Release Notification
Low/NotificationSoftware Release Notification
Low/NotificationSoftware Release Notification

Product Affected

ACX PTX QFX platforms running Junos Evolved software

Alert Description

Junos Software Service Release version 24.4R1-S2-EVO is now available for download from the Junos software download site

Download Junos Software Service Release:

  1. Go to Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as needed and follow the prompts

NOTE: Starting on August 30th, 2024, we include PR's severity with each entry. See KB86335 [juniper.net] for the definition of PR's Severity

 

Solution

Junos Software service Release version 24.4R1-S2-EVO is now available.

24.4R1-S2-EVO - List of Fixed issues

PR NumberSynopsisCategory: the replication daemon (repd) for Shared Memory-base
1855947
Critical		During ISSU the repd experiences a process crash in the master RE during the image validation phase
Product-Group=evo
Severity=Critical		On MX240/480/960 with dual REs (Routing Engine), when performing ISSU (In-Service Software Upgrade) from 23.4R1 to 24.4R1, the replication service daemon (repd) will core in master Routing Engine (RE) during image validation phase. The master RE becomes unresponsive, and the system drops to emergency shell mode (# prompt).
PR NumberSynopsisCategory: Border Gateway Protocol
1841090
Minor		The rpd process will crash when secondary route in VRF is auto-exported
Product-Group=evo
Severity=Minor		On all Junos and Junos Evolved platform, the rpd process will crash when an IPv6 (Internet Protocol Version 6) BGP (Border Gateway Protocol) - Labeled route is leaked using rib-groups to VRF (Virtual Routing and Forwarding) table and auto exported to IPv6 VPN(Virtual Private Network) table.
PR NumberSynopsisCategory: Express BT PFE L3 Features
1856732
Minor		Post configuration changes on an AE interface MPLS traffic is discarded for other interfaces/AE interface on a different FPC
Product-Group=evo
Severity=Minor		On Junos Evolved PTX10008, PTX10016, PTX10004 platforms having JNP10K-LC1201/LC1202 and multiple FPCs (Flexible PIC (Physical Interface Cards) Concentrators), it is observed that when any of the following configuration changes are performed on a given AE (Aggregate Ethernet) interface, this may cause MPLS (Multiprotocol Label Switching) traffic to be dropped on other interfaces or AE interfaces hosted on other FPCs having the same PIC and port number as the intended AE interface members where no such configuration change is made.* When family MPLS is removed from an AE interface, or* When an AE interface with family MPLS configured is deactivated, or* When the IFD (Interface Device) MTU (Maximum Transmission Unit) is modified on the AE interface that has family MPLS configured, or* When "vlan-tagging" is added or removed on an AE interface that has family MPLS configured, or* When "encapsulation" is added or removed on an AE interface that has family MPLS configured PTX10003, PTX10001-36, PTX10002-36QDD are not exposed.MPLS Traffic drops are recorded as 'normal discard' under "show pfe statistics traffic"
PR NumberSynopsisCategory: JNU issues in CSDS solution
1854356
Major		jnud continues to further sync with the MX controller when the schema tar file failed to secure copy from satellite to the controller
Product-Group=evo
Severity=Major		On Junos Node Unifier (JNU) topology when the schema tar file failed to secure copy (scp) from satellite to the controller, the jnud process continues synchronizing with the MX Series controller.
PR NumberSynopsisCategory: CoS support on DNX
1861541
Major		EXP rewrite not working on AE interface after system reboot.
Product-Group=evo
Severity=Major		The rewrite profile and associated opcodes are not correctly programmed in hardware after a reboot. This is confirmed by the absence of the profile in VTY dumps.
PR NumberSynopsisCategory: Layer 3 forwarding, both v4+v6
1848599
Major		Default route installation fails on Junos OS Evolved ACX Series platforms
Product-Group=evo
Severity=Major		On all Junos OS Evolved ACX Series platforms, default route installation fails when repeated default route relearning happens which could be due to reasons like LSP (Label Switched Path) flaps, interface flaps etc. The packets destined for unknown destination are dropped causing outage.
PR NumberSynopsisCategory: ACX VxLAN Issue
1854255
Minor		The evo-pfemand process crashes on ACX platforms without specific trigger
Product-Group=evo
Severity=Minor		On all Junos Evolved ACX platforms, evo-pfemand process crash is seen in a rare scenario when target next-hop is received with type Reject.
PR NumberSynopsisCategory: EVO Netstack FIB Service Daemon
1860358
Major		File Descriptor leak in fibd process leads to core files of different processes such as Jade, SSHd and Stunnel.
Product-Group=evo
Severity=Major		On Junos OS Evolved platforms, when fibd reaches the process limit on the maximum number of allowed open file descriptors, fibd is unable to open new file descriptors and track new reader processes. Given this, processes such as Jade, SSHd and Stunnel are not found by fibd, triggering the core files for these processes affecting device management and Tx/Rx packet process. The Soft Limit value within the "cat /proc//limits" output command will show the maximum number of file descriptors that fibd can have opened.
PR NumberSynopsisCategory: Issues related to EVO dependency layer including object graphs, incompletes, anomalies and nkdb
1854283
Major		[DCF14] [EVPN-VxLAN] After running a series of negative trigger tests on scale setup for 16 hours, traffic loss is seen in one IPv6 stream on ptx10001-36mr in CRB Spine and Border Router Role
Product-Group=evo
Severity=Major		This PR is not fixed in 23.4R2-S4 as fibd restart is not service impacting, This issue will be fixed in 23.4R2-S5-EVO
1857091
Major		Extremely rare core in applications
Product-Group=evo
Severity=Major		We may see a extremely rare core in applications when there are several interface flaps or interface configuration changes or reboots in a short interval of a few seconds. The issue is hard to hit and is seen only been twice even though its a day 1 issue.
PR NumberSynopsisCategory: software upgrade infra issues
1812515
Major		Boot up issue is seen during a software upgrade in ACX7100-32C/ACX7100-48L platforms running Junos Evolved
Product-Group=evo
Severity=Major		On ACX7100-32C/ACX7100-48L platforms with Innodisk Solid-State Drive (SSD), during a software upgrade, the system won't handle the partition change post-reboot, and the system will not boot properly.
PR NumberSynopsisCategory: Issues related to debug utilties - objmon, objshell/Dashboard
1838074
Minor		Serial Console Stops Working After Cable Reconnection
Product-Group=evo
Severity=Minor		On Junos OS Evolved platforms, the serial console may stop functioning, displaying a blank output, after one or more physical disconnections and reconnections of the console cable. The use of intermediate cable adapters or unreliable cables can exacerbate this issue.
PR NumberSynopsisCategory: Interface PRs defect & enhancement requests
1856651
Major		Mixing EP and SP style configurations on AE bundle causes traffic loss and protocol session failure on Junos OS Evolved PTX Series platforms
Product-Group=evo
Severity=Major		On all Junos OS Evolved PTX Series platforms, configuring an Enterprise (EP) style logical interface (family ethernet switching) on an Aggregated Ethernet (AE) bundle that is already configured with service provider (SP) style encapsulation (flexible-ethernet-services or extended-vlan-bridge) is not supported. If the unsupported configuration is committed, traffic on the interface is dropped and protocol sessions go down.
PR NumberSynopsisCategory: EVO MACSEC Platform Independent Implementation
1853676
Major		MACSec statistics will not show up in the "show interfaces statistics detail" command output
Product-Group=evo
Severity=Major		On PTX10008/PTX10016, PTX10001-36MR, PTX-10002-36QDD platforms with MACsec configured, the 'MACSec statistics' will not be displayed int the "show interfaces statistics detail" Junos CLI command output. This will not have any functional impact.
PR NumberSynopsisCategory: event/op/commit scripts, SLAX, netconf issues
1840657
Major		jnpr.junos.facts module returns null value for the dictionary key such as hostname/junos_info
Product-Group=evo
Severity=Major		In Junos EVO platforms with systems running on X based version, jnpr.junos.facts returns null value for the Hostname and Junos Info in remote authenticated users through Radius(AAA).
PR NumberSynopsisCategory: mgd, ddl, odl infra issues
1839955
Major		On Junos OS Evolved platforms, HTTPS download fails when HTTPS URL is present in the configuration
Product-Group=evo
Severity=Major		On Junos OS Evolved platforms, when HTTPS URL is present as a part of file or mentioned explicitly in the configuration, and when there is a download attempted through this file the download fails. However, this is will not impact the forwarding traffic only the download through HTTPS will fail.
PR NumberSynopsisCategory: jpppd daemon
1854387
Major		The jpppd process will crash with frequent subscribers login/logout
Product-Group=evo
Severity=Major		On Junos and Junos OS Evolved platforms, the jpppd (Juniper PPP daemon) process crash will be seen after a certain time of subscribers login/logout. The issue could also be seen with the applications that write their private data in /mfs/var/sdb/shmem/sdb_intf.ad.db, such as jl2tpd (Juniper L2TP daemon), repd (replication daemon) jdhcpd (Juniper DHCP daemon) and others.
PR NumberSynopsisCategory: KRT Queue issues within RPD
PR NumberSynopsisCategory: RPD Next-hop issues including indirect, CNH, and MCNH
1840722
Major		Traffic doesn't flow with preserve-nexthop-hierarchy
Product-Group=evo
Severity=Major		Due to Nexthop sharing, when there are IP and MPLS routes pointing to same Nexthop and IP routes getting installed first, the PFE installs the NH as IP NH. This results in packet corruption for MPLS traffic due to BCM limitation.
1858750
Critical		Route processing to handle nexthop weight differences in krt module
Product-Group=evo
Severity=Critical		On all Junos OS Evolved platforms, In some scenario after rpd (Routing Protocol Daemon) restart, the route change is not sent from routing daemon RIB(Routing Information Base) to forwarding plane FIB (Forwarding Information Base). This results in traffic drop.
PR NumberSynopsisCategory: SRX-1RU platfom datapath SW defects
1861483
Critical		On srx4700, LACP is not coming up in distributed mode
Product-Group=evo
Severity=Critical		In Release 24.4R1-S2, for SRX4700: LACP will not work in a distributed mode. To check the mode: root@casinoroyale-sol-01# run show ppm interfaces detail IFL-index: 2082, Protocol: LACP Interface Key: N/A Distributed: FALSE <=== This should be False for centralized (true for distributed) LACP will continue to work fine in centralized mode. The way to enter centralized mode is through the following CLI command: >set protocols lacp ppm centralized If the LACP is in distributed mode the LACP PDU will not be exchanged with the peer device resulting in the LACP state remaining in Attached. This will cause the interface (or the ae bundle) to remain in a DOWN state. The only impact of a centralized mode is when the RE is heavily utilized and busy, we might end up loosing packets in a FAST periodic mode of LACP causing interface to flap. This behavior will be fixed in S3 release and distributed mode will be enabled again.
PR NumberSynopsisCategory: Authentication, Authorization, Accounting, PAM (RADIUS/tacplus)
1843935
Major		On SRX300 series DHCP relay stops working and the device generates coredump after upgrading to JunOS 23.4R2-S2.1
Product-Group=evo
Severity=Major		On SRX300 series devices, when TACACS accounting is configured, after an upgrade to Junos 23.4R2-S2.1, the DHCP-relay may not work anymore and the shm-rtsdbd process may produce coredumps.
PR NumberSynopsisCategory: Configuration mgmt, ffp, load-action, commit processing
1829886
Major		Commit error check-out failed does not get triggered when a complete bridge-domain is configured in instance-type vrf.
Product-Group=evo
Severity=Major		Commit error check-out failed does not get triggered when a complete bridge-domain is configured in instance-type vrf.
1845657
Major		Baseline configuration commit takes more time with 256000 MAC configurations
Product-Group=evo
Severity=Major		On all Junos and Junos OS Evolved platforms with dual RE (Routing Engine), the baseline configuration commit takes more time when the device has 256000 MAC (Media Access Control) configurations configured under groups. It is a scaling issue, and occurs when a large number (256000 or more) of MAC configurations are configured. This has no impact to network traffic.
PR NumberSynopsisCategory: UI Infrastructure - mgd, DAX API, DDL/ODL
1847834
Major		Multiple daemons crash upon ephemeral or static db commits
Product-Group=evo
Severity=Major		On all Junos platforms with ephemeral configuration, multiple daemons like chassisd, dcd, l2ald, l2cpd, mib2d and transportd crash upon ephemeral or static db commits causing service traffic impact. The services will self recover after the issue is hit in the network.

 

 

24.4R1-S2-EVO - List of Known issues

PR NumberSynopsisCategory: Fabric for LC1300 and SIB3
1843391
Minor		[fabric] [fabrictag] Aegon : EVO PTX10008:Aegon: some ccl is not fixed by AH, when GRES is initiated while AH is in progress
Product-Group=evo		When AH is in progress and GRES happens, there is a possibility that AH may fail. In case of AH Failure, following recovery mechanisms can be tried: Try executing the AH through CLI to see if it helps. If CLI AH command does not recover the link, PFE offline/online can be tried to recover the link. If PFE offline/online also does not recover the link, then FPC offline/online can be tried.

Resolved In:
1849563
Major		[fabric] [fabrictag] aegon: EVO PTX10008:Aegon: found voq drop during sending 16% traffic (not 16.6%) and gracefully offline 5 sibs
Product-Group=evo		When multiple SIBs are offlined in succession, at times it can result in continuous traffic drops.

Resolved In:
1857187
Minor		[fabric] [fabrictag] aegon : EVO PTX10008:Aegon: pfes go to fault after several sib and pfe restart together
Product-Group=evo		If multiple SIBs and PFEs are restarted together, fatal interrupt can be seen and the PFEs will remain in fault state.

Resolved In:
PR NumberSynopsisCategory: Express BX PFE L3 Features
1853920
Major		[PDT][MSFT][AEGON]: Aegon line card went into fault state after restart with ASAN image [24.4I20241203150203-EVO_swaradkar]
Product-Group=evo		With FPC restart on a scaled system with ASAN, evo-aftmand see head-of-line blocking of platform DDS objects that may cause DMF init to timeout and the FPC to go to fault state.

Resolved In: evo:24.4R2-EVO evo:25.2R1-EVO evo:25.3R1-EVO junos:24.4R2 junos:25.2R1
PR NumberSynopsisCategory: JNU issues in CSDS solution
1854326
Major		After the JNU config is deleted and added back jnuadmin's uid changes
Product-Group=evo		Not impacting production.

Resolved In: junos:24.4R1-S2 junos:24.4R2 junos:25.1R1 junos:25.2R1
PR NumberSynopsisCategory: jflow issues on ACX platforms
1858954
Minor		Jflow functionality stops working when configured with sflow
Product-Group=evo		On all ACX Junos Evolved platforms running 24.2R1 and later versions, when both sFlow and JFlow services are configured simultaneously on the device, JFlow stops functioning due to mirror ID allocation conflicts. There won't be any traffic impact; the only problem is that JFlow won't be operational.

Resolved In: evo:24.4R2-EVO evo:25.1R1-EVO evo:25.2R1-EVO evo:25.3R1-EVO junos:24.4R2 junos:25.2R1
PR NumberSynopsisCategory: EVO Netstack icmpd
1733616
Minor		DNS resolution over a routing-instance fails
Product-Group=evo		Many issues were observed in EVO library regarding the DNS resolution & these were fixed in this PR

Resolved In: evo:21.4R3-S6-EVO evo:23.2R2-EVO evo:23.4R1-S1-EVO evo:23.4R2-EVO evo:24.1R1-EVO junos:23.4R2
PR NumberSynopsisCategory: Issues related to debug utilties - objmon, objshell/Dashboard
1843642
Major		Core dumps are incomplete after unzip.
Product-Group=evo		When unzipping core dump tar balls, there is an error or warning related to gzip hitting unexpected end of file.

Resolved In: evo:22.3X50-EVO evo:24.2R2-EVO evo:24.4R2-EVO evo:25.1R1-EVO evo:25.2R1-EVO junos:24.4R2
PR NumberSynopsisCategory: EVO Netstack Juniper Tunnel Driver Module
1854932
Major		TCP connection stalls with BGP Explicit Null and MPLS forwarding on certain Junos Evolved PTX platforms when sending packets exceeding MTU limit
Product-Group=evo		On Junos Evolved PTX10001, PTX10004 and PTX10008 platforms, if LDP(Label Distribution Protocol) is initially established over IP protocol, and later transitions to MPLS(Multiprotocol Label Switching) encapsulation (mpls-forwarding), the outgoing TCP(Transmission Control Protocol) packet size is not adjusted to account for added MPLS label. As a result, packets exceeding the configured interface MTU(Maximum Transmission Unit) are dropped before transmission. Since the receiving side does not receive these packets, the LDP session eventually times out due to "hold time expiry".

Resolved In: evo:23.2R2-S3-EVO evo:23.4R2-S5-EVO evo:24.4R2-EVO evo:25.2R1-EVO
PR NumberSynopsisCategory: EVO L2 Control Plane PRs
1853868
Major		Router flag is not getting set in Neighbor Advertisement message
Product-Group=evo		When EVPN (Ethernet Virtual Private Network) routing instance has IRB (Integrated Routing and Bridging) interface with IPv6 (Internet Protocol version 6) address, ICMPv6 NA (Neighbour advertisement) reply from IRB IPv6 address doesn't have router flag. The ICMPv6 NA from IRB IPv6 should have router flag.

Resolved In: evo:23.4R2-S4-EVO evo:23.4X100-D30-EVO evo:24.2R2-EVO evo:24.4R2-EVO evo:25.1R1-EVO evo:25.2R1-EVO junos:23.4R2-S4 junos:24.2R2 junos:24.4R2 junos:25.1R1 junos:25.2R1
PR NumberSynopsisCategory: All Guardian (ACX7509) Linecard (FPC) related issues
PR NumberSynopsisCategory: All Guardian (ACX7509) timing related issues
PR NumberSynopsisCategory: UI Infrastructure - mgd, DAX API, DDL/ODL
1704406
Major		VMX :: JDI-REG-VIRTUAL: Observed xml validation failure seen for "show host | display xml validate" and The emitted XML is INVALID.
Product-Group=evo		"show host" is not properly XMLized. So from a netconf channel the XML output is encapsulated in an tag. If any automation tool plans to use the XML output of this CLI command, it may have to do some logic on its side (as the response is not 100% XMLized)

Resolved In:
PR NumberSynopsisCategory: Issues related to NETCONF
1792554
Minor		JUNOS: Netconf: Edit-config with operation attribute create for existing hierarchy is not working as per RFC 6241
Product-Group=evo		JUNOS: Netconf: Edit-config with operation attribute create for existing hierarchy is not working as per RFC 6241

Resolved In:

 

Modification History

First publication 2025-04-04