19.2R1-S4: Software Release Notification for JUNOS Software Version 19.2R1-S4

Junos Software service Release version 19.2R1-S4 is now available.

19.2R1-S4 - List of Fixed issues

PR Number	Synopsis	Category: EX2300/3400 platform
1477165	EX3400 me0 interface might remain down Product-Group=junos	The me0 interface of EX3400 does not come up when connected to 100m speed interface.
PR Number	Synopsis	Category: Border Gateway Protocol
1396344	Processing a large scale as-path regex will cause the flap of the route protocols Product-Group=junos	When 'as-path-group' is configured under BGP, if a configuration with a large scale as-path regex is committed, the route protocols flap might be seen.
1466734	The configured BGP damping policy might not take effect after BGP is disabled and then enabled followed by "commit" Product-Group=junos	The configured BGP damping policy might not take effect when BGP is disabled and then enabled followed by a "commit" CLI, only the default damping policy is in effect. However, if the BGP is disabled and enabled followed by a "commit full" CLI then both default damping and configured damping policy are both in effect.
1473351	Removing cluster from BGP group might cause prolonged convergence time Product-Group=junos	Cluster removal from BGP group might lead to a state where each subsequent change to BGP configuration will trigger import policy reevaluation causing prolonged convergence time of several minutes. This might result in a traffic loss.
1481589	The rpd process might crash with BGP multipath and route withdraw occasionally Product-Group=junos	In BGP multipath scenario on all Junos platforms, if original active/best BGP multipath routes got flapped occasionally, some routes, which are changed from best routes to alternative now, are removed from the BGP multipath route list, but its multipath flag are not cleared, due to some temporarily incorrect route reorder in BGP. And when the currently active route got withdrawn for some reason, and the original best routes again become the best routes then rpd might hit an assert and crash.
1487691	High CPU utilization might be observed when the outgoing BGP updates are sending slowly Product-Group=junos	On all Junos platforms with the BGP routing protocols, the rpd process might go into a high CPU utilization causing slow network convergence. If a BGP peer is receiving and processing BGP updates slowly, this may cause the BGP output queue of the sending BGP peer to be full. When the queue is full it causes high CPU utilization of the BGP IO thread (bgpio, it is part of the rpd daemon) on the sending BGP peer. This defect could cause network-wide slow BGP network convergence. (See also https://kb.juniper.net/TSB17725)
PR Number	Synopsis	Category: Cassis pfe microcode software
1459698	Traffic blackholing upon interface flap after DRD auto-recovery Product-Group=junos	An interface stops forwarding traffic when MX software triggers a "DRD reorder timeout recovery" event follows by an interface flap on the same XMCHIP. When the logic is triggered, you will see a "cmtfpc_xmchip_drd_reorder_id_timeout_callback" message in the PFE syslog messages. This issue affects XM based MPCs (3E 4E 5E 6E 2E-NG 3E-NG).
PR Number	Synopsis	Category: OpenSSH and related subsystems
1454177	SSH login might fail if a user account exists in both local database and RADIUS or TACACS+ Product-Group=junos	SSH login from an automation tool to the Junos device might not be successful if the username is configured both as a local user and on remote RADIUS/TACACS server, and using authentication method 'password'.
PR Number	Synopsis	Category: Firewall Filter
1466698	An output bandwidth-percent policer with logical-bandwidth-policer applied to an AE bundle along with an output-traffic-control-profile has incorrect effective policing rate Product-Group=junos	On MX platforms, for an AE bundle of at least two members hosted at two different FPCs, if the AE interface is with CoS output-traffic-control-profile of shaping-rate and with the output filter of policer with logical-bandwidth-policer and bandwidth-percent, the AE interface might have incorrect effective output policing rate.
PR Number	Synopsis	Category: Express PFE FW Features
1432116	The FPC might crash when a firewall filter is modified Product-Group=junos	In QFX10K/PTX series platforms, if a firewall filter with multiple match conditions is configured on interfaces which are Up and the firewall filter is modified (either a new action is added or the condition is added/removed etc.), the FPC might crash and restart. It might affect the service/traffic.
1462634	The sample/syslog/log action in output firewall filter with packet of size less than 128 might cause ASIC wedge (all packet loss) on PTX platforms Product-Group=junos	On PTX platforms, if output firewall filter is configured with sample/syslog/log action, the host interface might get wedged for packets with lengths 0-128 including Layer 3 headers.
PR Number	Synopsis	Category: PTX Express ASIC interface
1412126	PTX interface stays down after maintenance Product-Group=junos	On PTX3000/PTX5000 linecard (QSFP28-100GBASE-LR4) interface may stay down after software upgrade. Issue is usually observed on links connected to another vendors equipment.
PR Number	Synopsis	Category: Libjtask for RPD tasks, scheduler, timers, memory, and slip
1418192	The rpd process may crash if restarting the rpd or deactivating "logical-system" Product-Group=junos	The rpd process might generate a core file when the user intentionally restarts the rpd or deactivates logical-system.
PR Number	Synopsis	Category: Kernel software for AE/AS/Container
1441772	On PTX/QFX AE outgoing traffic might be dropped after changes are made to AE Product-Group=junos	On PE-chip based PTX/QFX platforms (including PTX1K/3K/5K/10K series, QFX10K series), if CoS IEEE-802.1 rewrite rule is configured and bound to the AE interface, traffic going out the AE interface might get dropped after changes are made to AE, due to nexthop install failure on ingress PFEs.
PR Number	Synopsis	Category: ISIS routing protocol
1455432	The rpd might crash continuously due to memory corruption in ISIS setup Product-Group=junos	With ISIS configured and in a very rare case, memory corruption may occur, this may cause rpd crash continuously.
PR Number	Synopsis	Category: ISSU related issues for MMx
1476505	Dark window size is more than expected, lost 31.0872721524375 seconds of traffic Product-Group=junos	In MX2K chassis with multiple line cards (XM and EA based) and SFB2 fabric, we may see a longer traffic drops in the order of 30 seconds depending on the number of line-cards in the chassis
PR Number	Synopsis	Category: PFE infra to support jvision
1456275	Queue data might be missing from path '/interfaces/interface/state' Product-Group=junos	On subscribing to '/interfaces/interface/state/' it might get subscribed to '/junos/system/linecard/interface/traffic/' internally, instead of '/junos/system/linecard/interface/queue/' which might impact traffic.
PR Number	Synopsis	Category: Layer 2 Control Module
1469635	Memory leak on l2cpd process might lead to l2cpd crash Product-Group=junos	On all Junos platforms with l2cpd (Layer-2 control protocols) daemon, committing configuration changes which are processed by l2cpd (e.g., flexible-vlan-tagging, stacked-vlan-tagging, vlan-tagging, family ethernet-switching) might cause marginally memory leak. Committing the l2cpd processed configuration changes in a successive manner might cause the memory resource exhaustion (Some operations have the same effect as the committing action, e.g., bouncing a vlan-tagged interface in a successive way). Eventually, it could result in the l2cpd process crash.
PR Number	Synopsis	Category: lldp sw on MX platform
1460347	Multiple leaf's and prefixe's missing when LLDP neighbor added after the streaming started at global level Product-Group=junos	Many attributes are not notified as part of LLDP on-change event when a new neighbor is learnt
PR Number	Synopsis	Category: mc-ae interface
1447693	The l2ald might fail to update composite NH Product-Group=junos	This is a timing issue where the l2ald receive underlay NH from rpd as part of LSI IFF ADD (VPLS core NH) and creates flood NH. Due to a flap at local IFL or core (VPLS etc.), the l2ald receives multiple LSI IFF Add and Delete in some order. In some sequence where rpd delete underlay NH from Kernel Forwarding table but the l2ald still create flood NH with this underlay NH, because IFF delete is yet to be received at the l2ald, so l2ald might fail to update Composite NH. This is generic L2 issue and can happen without mc-ae.
PR Number	Synopsis	Category: Multiprotocol Label Switching
1457681	The rpd crash may be observed with traceoption enabled in MPLS Product-Group=junos	On all Junos platforms, If the traceoption is enabled in MPLS and SNMP polling is going on, and during route lookup match a given route which one is neither router next-hop nor chain next-hop, then rpd crash may be observed. The rpd crash may cause all the routing protocols adjacencies to be reestablished.
PR Number	Synopsis	Category: FreeBSD Kernel Infrastructure
1439906	FPC might reboot if jlock hog occurs on all Junos VM based platforms Product-Group=junos	On a JUNOS VM using TSC clocking from the host system, "jlock hog" messages may be seen. This may lead to FPCs reboot.
PR Number	Synopsis	Category: IPv6/ND/ICMPv6 issues
1439844	DHCPv6 relay binding is not up when integrated routing and bridging(IRB) interface enabling DHCPv6 Snooping and Neighbor Discovery Inspection (NDI) simultaneously on EX9200 Product-Group=junos	In DHCPv6 relay scenario, when DHCPv6 snooping and NDI enable simultaneously on IRB interface on EX9200, DHCPv6 relay binding is not up.
PR Number	Synopsis	Category: Kernel socket data replication issues for protocols that use
1472519	The kernel may crash and vmcore may be observed after configuration change is committed Product-Group=junos	On all Junos platforms, after committing the configuration change (e.g. removal of protocols like mpls, isis, ldp from the interfaces), then the kernel may crash and vmcore may be observed. This issue also may cause protocol adjacency failure.
PR Number	Synopsis	Category: OSPF routing protocol
1452118	The TI-LFA backup path for adj-sid is broken in OSPF Product-Group=junos	The TI-LFA (Topology-Independent Loop-Free Alternate) backup path for adj-sid is broken in OSPF where the shortest path to the node opposite the adj-sid is not the one hop path over the interface indicated by the adj-sid. If the backup path is broken when the primary path fails, it will cause traffic loss.
PR Number	Synopsis	Category: PE based L3 software
1434567	IPv6 neighbor solicitation packets getting dropped on PTX Product-Group=junos	In IPv6 scenario on PTX platforms (including PTX3K/5K with FPC3, PTX1K, PTX10K), when a parity error which is due to hardware error occurs on FPC, the neighbor solicitation (NS) packets might get dropped. It will cause IPv6 neighbor discovery failure, and no relevant alarms or logs are reported during the issue.
PR Number	Synopsis	Category: Interface related issues. Port up/down, stats, CMLC , serdes
1465302	The physical interface of AE (Aggregated Ethernet) might take time to come up after disable/enable Product-Group=junos	On Junos platforms, the physical interface of AE might come up after a long delay (4 mins) if there are millions of bgp routes learnt on the device. This delay is happening because PFE Manager thread is busy processing the routing updates from RE. These routing updates are the result of AE interface going down at the first step of disabling the interface.
1480480	The remaining interface may be still in downstate even the number of channelized interfaces is no more than 5 Product-Group=junos	On the QFX5210-64C platforms, after reverting the number of channelized interfaces less than 6 per pipe, the remaining interfaces of the pipe may have a chance to be still in downstate, the expected behaviour is the port to be up automatically after the above changes.
1480480	The remaining interface may be still in downstate even the number of channelized interfaces is no more than 5 Product-Group=junosvae	On the QFX5210-64C platforms, after reverting the number of channelized interfaces less than 6 per pipe, the remaining interfaces of the pipe may have a chance to be still in downstate, the expected behaviour is the port to be up automatically after the above changes.
PR Number	Synopsis	Category: QFX PFE Class of Services
1476829	QFX Platforms are exhibiting invalid PFE PG counter pairs to copy, src 0xfffff80, dst 0 Product-Group=junos	On QFX Series Switches the following logs might be displayed as a result of polling class of service related SNMP OIDs. These messages might eventually lead to interface counters not being populated properly. There is no other impact from these messages. Nov 19 07:00:07 switch kernel: et-0/0/33: invalid PFE PG counter pairs to copy, src 0xfffff8012285d720, dst 0 Nov 19 07:00:07 switch kernel: et-0/0/36: invalid PFE PG counter pairs to copy, src 0xfffff800076df570, dst 0 Nov 19 07:00:07 switch kernel: et-0/0/37: invalid PFE PG counter pairs to copy, src 0xfffff8012285d750, dst 0 Nov 19 07:00:07 switch kernel: et-0/0/40: invalid PFE PG counter pairs to copy, src 0xfffff800076df480, dst 0 Nov 19 07:00:07 switch kernel: et-0/0/44: invalid PFE PG counter pairs to copy, src 0xfffff800255374e0, dst 0 Nov 19 07:00:07 switch kernel: et-0/0/45: invalid PFE PG counter pairs to copy, src 0xfffff800076df420, dst 0 Nov 19 07:00:07 switch kernel: et-0/0/46: invalid PFE PG counter pairs to copy, src 0xfffff800076de390, dst 0 Nov 19 07:00:07 switch kernel: et-0/0/47: invalid PFE PG counter pairs to copy, src 0xfffff800076df210, dst 0 Nov 19 07:00:07 switch kernel: et-0/0/48: invalid PFE PG counter pairs to copy, src 0xfffff800076dff30, dst 0
PR Number	Synopsis	Category: RPD Next-hop issues including indirect, CNH, and MCNH
1441438	For a route received via EBGP the AIGP value may not be considered as expected Product-Group=junos	This issue is related to BGP AIGP (accumulated IGP) feature. Normally, with AIGP enabled, BGP can select paths based on IGP metrics. This enables BGP to choose the shortest path between two nodes, even though the nodes might be in different ASs. But in some scenario where the same route is received from both IBGP and EBGP (the AIGP attribute is carried), the nexthop received over EBGP might not be resolved using the AIGP value. It means during the best-route selections, if the devices have to do tie-break in AIGP step then it may not work as expected. Thus the traffic might not go through the expected path.
1441550	The rpd may crash or consume 100% of CPU after flapping routes Product-Group=junos	When flapping the existed flood nexthop type routes, it may cause rpd crash or consume 100% of CPU. This issue may cause routing protocols sessions/neighbors flap or traffic loss.
PR Number	Synopsis	Category: RPD policy options
1433615	Policy matching RD changes next-hop of the routes which do not carry RD Product-Group=junos	If a policy-option with only conditions "from route-distinguisher" and "then next-hop a.b.c.d" is applied to BGP, the next hop for routes in the inet.0 might be set to this next hop a.b.c.d, even though these routes do not carry any route-distinguisher value (l3vpn.inet.0 is unaffected).
PR Number	Synopsis	Category: RPD route tables, resolver, routing instances, static routes
1471968	The rpd might crash when both instance-import and instance-export policies containing "as-path-prepend" action Product-Group=junos	On all Junos platforms, when an internally route-leaking between routing-instances using instance-import and instance-export policies and both policies containing "as-path-prepend" actions, if this as-path is referred by some route, the rpd might crash after these route change/delete (e.g. clearing bgp neighborship, changing BGP/policy config, etc.).
PR Number	Synopsis	Category: Resource Reservation Protocol
1445994	Traffic blackhole likely if two consecutive PLRs along the LSP perform local repair simultaneously under certain mis-configured conditions Product-Group=junos	In RSVP environment with link or node protection deployed, if two consecutive PLRs (point of local repair) along the LSP perform local repair simultaneously and if backup LSP signaling between the downstream PLR & MP (merge point) pair fails due to any reason, then the backup LSP signaling between the upstream PLR & MP pair also does not succeed. Then due to a software defect the upstream PLR does not correctly clean up the LSP state and continues to send traffic into the backup LSP, resulting in traffic blackhole at the downstream PLR.
1476773	RSVP LSPs might not come up in scaled network with very high number of LSPs if NSR is used on transit router Product-Group=junos	If NSR is enabled on transit router with scaled RSVP LSPs, RESV message might not be sent from transit router because the path messages replication on primary RE does not complete in time. Hence RSVP LSPs might not come up with traffic impact.
PR Number	Synopsis	Category: RPD API infrastructure
1481953	The rpd may crash when executing "show route protocol l2-learned-host-routing" or "show route protocol rift" CLI command on a router Product-Group=junos	On all Junos platforms, executing the CLI command of "show route protocol l2-learned-host-routing" or "show route protocol rift" on a router may cause the rpd crash if there is an active route in bgp.rtarget.0 routing table.
PR Number	Synopsis	Category: RPM and TWAMP
1434740	TWAMP session keep pending state when co-operate with non-Juniper device Product-Group=junos	When Juniper device co-operate with non-Juniper device on TWAMP feature, two sides will keep pending state because of different timeout format.
PR Number	Synopsis	Category: PTX5000 Platform including chassisd, RE, CB, power management
1471178	A PTX5K SIB3 might fail to come up in slot 0 and/or slot 8 when RE1 is primary. Product-Group=junos	A PTX5K SIB3 might fail to come up in slot 0 and/or slot 8 when RE1 is primary.
PR Number	Synopsis	Category: All PRs related to platform SRX5XX
1459037	SRX branches device might not be reachable when initiating offline command for PIC Product-Group=junos	For the SRX branches, the device might not be reachable when offline command is initiated for the PIC (request chassis fpc offline slot xx). It is related to the behaviour of broadcom SDK version 6.5.x.
PR Number	Synopsis	Category: Trio pfe l3 forwarding issues
1426727	Some CFM and BFD sessions might flap while collecting MPLS statistics Product-Group=junos	On Junos-based platform with MPLS and MPLS statistics enabled as well as a CFM or BFD, when CFM with continuity-check interval less than 1000ms (e.g. 100ms) or BFD with minimum-interval less than 1000ms (e.g. 100ms), during the periodic MPLS statistics collection if there are a large number of next-hops (several thousand) related to MPLS forwarding, the transmission of the periodic CFM or BFD protocol packet may be delayed. It may cause some CFM or BFD sessions to expire on the remote side of the session due to timeout, which can further result in traffic drop due to CFM/BFD flapping.
PR Number	Synopsis	Category: Trio pfe microcode software
1409626	LACP DDOS policer is incorrectly triggered by other protocols traffic on all EX92XX/T4000 and MX platforms Product-Group=junos	DDOS policer for LLDP/MVRP/Provider MVRP/dot1X is incorrectly identified as LACP DDOS violation on EX92xx/T4000 and MX series platforms. Issue can appear whenever there is an overflow of traffic from any of these protocols and triggers DDOS for LACP rather than the actual protocol.
PR Number	Synopsis	Category: Authentication, Authorization, Accounting, PAM (RADIUS/tacplus)
1478959	SSH login may hang and the TACAS plus server closes the connection without sending any authentication failure response Product-Group=junos	On all Junos platforms, the SSH login session may hang if Junos device is sending an authentication request to the TACACS plus server with an incorrect secret and the TACAS plus server closes the connection without sending any authentication response.
PR Number	Synopsis	Category: Junos Automation, Commit/Op/Event and SLAX
1461021	Modifying the REST configuration might cause the system to become unresponsive Product-Group=junos	When Representational State Transfer (REST) service configuration is modified, for example the REST service is configured and then deleted for multiple times, the system might become unresponsive, even to SSH and console. This issue has service impact.
PR Number	Synopsis	Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1464439	The CPU utilization on mgd daemon might be stuck at 100% after the netconf session is interrupted by flapping interface Product-Group=junos	If a netconf session is initiated over inband connection, the CPU utilization on mgd daemon might be stuck at 100% after the netconf session which is executing an RPC call for some commands gets interrupted by flapping interface. There is no impact observed to control-plane or forwarding-plane, the subsequent netconf session will continue to function.
PR Number	Synopsis	Category: PTX/QFX100002/8/16 platform software
1464119	FPC might restart during run time on PTX10K/QFX10K platforms Product-Group=junos	On PTX10K/QFX10K platforms, FPC might restart if there is some corruption in BCM (Broadcom) switch (a small internal ethernet switch, instead of PFE engine) inside the FPC. It is a timing issue. The reason is that the PCIe speed configuration for BCM switch is not correct. And this issue is resolved in some FPC U-boot versions.

Knowledge Base