Search our Knowledge Base sites to find answers to your questions.
Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles18.2R3-S5: Software Release Notification for JUNOS Software Version 18.2R3-S5
Warning: With VPLS/Bridge-Domain environment, an MX/EX9200 Series router with Trio-based MPCs running software version 18.2R3-S5. The MPCs may experience NH memory leak in the PFEs when using integrated routing and bridging (IRB) interface participating in the VPLS/Bridge-domain instance.
Junos Software service Release version 18.2R3-S5 is now available.
PR Number | Synopsis | Category: DOT1X |
---|---|---|
1504818 | EX2300-48MP :: Client did not receive captive-portal success page by downloading the ACL parameter as Authentication failed Product-Group=junos |
In case of captive portal, authentication fails for captive portal user when receives the filter from the RADIUS for that user. This issue is seen only in the captive portal configuration with RADIUS filter when dot1x stanza is not present. |
PR Number | Synopsis | Category: EX4300 Platform |
1502726 | Traffic loss might be seen with framing errors or runts if MACsec is configured on EX4300 Product-Group=junos |
On EX4300 platform with Media Access Control Security (MACsec) configured, if there is high traffic flowing through the MACsec enabled link, increasing framing errors or runts statistics might be seen in the output of "show interfaces extensive <>" for the affected interface. Traffic loss might also happen due to this issue. |
PR Number | Synopsis | Category: QFX Access control list |
1499918 | Traffic drop might be observed after modifying FBF firewall filter Product-Group=junos |
On QFX5K platforms, after making changes in filter-based forwarding (FBF) firewall filter that is configured with multiple terms or different routing instances, traffic drop might be observed. |
PR Number | Synopsis | Category: QFX PFE CoS |
1510365 | Traffic might be forwarded to wrong queue when fixed classifier is used Product-Group=junos |
If L2 access or vlan bridge IFL is created after fixed classifier is applied, the traffic matching the fixed classifier might be forwarded in unexpected queue, it might cause congestion unexpectedly hence there is traffic impact. |
PR Number | Synopsis | Category: QFX PFE L2 |
1474142 | Traffic might be affected if composite next hop is enabled Product-Group=junos |
On QFX5000 and EX4600 platforms with composite next hop enabled, traffic loss would occur when deleting leaked routes with composite next hop. |
1499422 | The FPC will go down when 100G link comes up on the network port of the QFX5110-48S device Product-Group=junos |
On the QFX5110-48S device running on Junos 19.3R2-S2, 18.2R3-S3 or 18.2R3-S4, the FPC will go down when the 100G link comes up on the network port. This leads to FPC up and down every 90 seconds. During the problem state running CLI "show chassis fpc detail" will not yield any output for upto 90sec. user@device> show chassis fpc detail. <-------- Empty Once FPC state transition back to online state, the 100G transceivers gets detected and fpc flap is seen again. This behavior is seen continuously as long as 100G transceivers remain connected to the QFX device in question. If 100G interfaces gets disabled from CLI or physically removed from the QFX switch, the FPC flap will no longer be seen. Note: This issue is not applicable when 100G-QSFP is used as a VCP port on QFX5110-48S. |
PR Number | Synopsis | Category: "agentd" software daemon |
1455384 | Agentd memory may leak and crash when RPD session closing without releasing memory on PTX or MX Product-Group=junos |
On PTX and MX, agentd memory may leak and crash because its memory leaking happens when the internal communication is broken between agentd and rpd. |
PR Number | Synopsis | Category: Border Gateway Protocol |
1396344 | Processing a large scale as-path regex will cause the flap of the route protocols Product-Group=junos |
When 'as-path-group' is configured under BGP, if a configuration with a large scale as-path regex is committed, the route protocols flap might be seen. |
1482551 | The rpd might be crashed after BGP peer flapping Product-Group=junos |
On all Junos platforms, with BGP long-lived graceful restart (LLGR) or BGP route dampening configuration, The rpd might be cored after BGP peer flapping. This is a day-1 issue. |
1499977 | The rpd may crash if the import policy is changed to accept more routes that exceed the teardown function threshold Product-Group=junos |
On all platforms with BGP max-acceptance prefix limit (accepted-prefix-limit with teardown action) configured, the rpd crashes may occur when a policy change causes the number of routes being imported cross the configured threshold value and teardown action is being performed by the router. |
PR Number | Synopsis | Category: MX Platform SW - FRU Management |
1463169 | The RE switchover may not be triggered when the master CB clock failure Product-Group=junos |
On the specific Junos platforms, the RE switchover may not be triggered when the master CB clock failure is detected. The master CB with faulty clock can't operate normally and this issue may cause fabric plane failure. |
PR Number | Synopsis | Category: Ethernet OAM (LFM) |
1454187 | The CFM UP MEP session might get stuck in failed state on MX platform Product-Group=junos |
On MX platforms, if CFM UP MEP session is configured on AE interface with LACP and it is over l2vpn/l2circuit service, when AE link flaps due to LACP timeout or LACP state re-initialization or due to any other reason and l2vpn/l2circuit comes back up within CCM timeout, the CFM session might get stuck in failed state. |
PR Number | Synopsis | Category: EVPN Layer-2 Forwarding |
1498023 | The l2ald memory leak may be observed in any EVPN scenario Product-Group=junos |
In any EVPN scenario (for example, active-active multi-homing mode, active-standby multi-homing mode, EVPN-VXLAN, or EVPN-MPLS), the l2ald memory might slowly come up when the local CE device or core face interfaces continuously flap. If the memory of l2ald is exhausted, it causes the l2ald to crash. |
1503657 | The MAC address of the LT interface might not be installed in the EVPN database Product-Group=junos |
In EVPN-VXLAN (Ethernet Virtual Private Network - Virtual Extensible LAN) scenario if the LT (Logical Tunnel) interface is under the bridge-domain of the EVPN-VXLAN instance, the MAC address of the LT interface might not be installed in the EVPN database. Thus no type-2 EVPN route is generated for the LT interface which results in unnecessary flooding and replication by the remote EVPN peer in the network. |
PR Number | Synopsis | Category: jdhcpd daemon |
1431201 | The jdhcpd_era log files constantly consume 121M of space out of 170M, resulting into file system full and traffic impact Product-Group=junos |
On EX platforms with service dhcp enabled, the jdhcpd_era log files constantly consume 121M of space out of 170M, resulting into file system full and traffic impact. Memory usage of /var/log/ will reach 100%. |
PR Number | Synopsis | Category: User Firewall related issues |
1499090 | Don't use capital characters for source-identity when using "show security match-policies" cmd. Product-Group=junos |
When using "show security match-policies" cmd to match a policy with source-identity configured, only the non-capital source-identity name can be matched by policy. |
PR Number | Synopsis | Category: Multiprotocol Label Switching |
1467278 | The rpd might crash in PCEP for the RSVP-TE scenario Product-Group=junos |
In PCEP (Path Computation Element Protocol) with RSVP Traffic Engineered LSP (TE LSP) scenario, the two LSPs with the same TE LSP name might be shared between Path Computation Element (PCE) and Path Computation Client (PCC) in some rare cases. Then, if the configuration of LSP is delegated from CLI and externally controlled by PCC at the same time, the rpd might be crashed. |
PR Number | Synopsis | Category: Bugs related to ethernet interface on MX platform |
1493699 | One port on MIC-3D-2XGE-XFP flapping might cause the other port on the same MIC to flap Product-Group=junos |
Due to the code change in PR 1463859, one port on MIC-3D-2XGE-XFP flapping might cause the other port on the same MIC to flap. |
PR Number | Synopsis | Category: MX104 Software - Chassis Daemon |
1453893 | FPC/PFE crash may happen with ATM MIC installed in the FPC Product-Group=junos |
On MX-Series routers FPC crash (for MX240-MX2020 platforms) or PFE crash (on MX104 platform) may happen when MIC-3D-8OC3-2OC12-ATM is installed and ATM interfaces are configured. |
PR Number | Synopsis | Category: MX10K platform |
1415671 | "FPC x Voltage Tolerance Exceeded" alarm raised and cleared upon bootup of JNP10K-LC2101 Product-Group=junos |
After powering on the MPC "JNP10K-LC2101"chassis we are reading the voltage 1345 mV-1348mV for about ~20 sec and then its getting stabilized to the 1493mV, during this period we are reporting the "FPC x Voltage Tolerance Exceeded" Major alarm |
1415671 | "FPC x Voltage Tolerance Exceeded" alarm raised and cleared upon bootup of JNP10K-LC2101 Product-Group=junosvae |
After powering on the MPC "JNP10K-LC2101"chassis we are reading the voltage 1345 mV-1348mV for about ~20 sec and then its getting stabilized to the 1493mV, during this period we are reporting the "FPC x Voltage Tolerance Exceeded" Major alarm |
PR Number | Synopsis | Category: Kernel Composite Next Hop (composite / l3vpn) Infrastructure |
1287956 | Not following the guideline of rebooting entire chassis after changing chassis network-services configuration can cause vmcore and crash of FPCs/routing-engines on chassis. Product-Group=junos |
When configuration at hierarchy [edit chassis network-services] is changed a reboot of chassis is needed to avoid any unexpected behavior. One such behaviour is an assest condition due to issues in nexthop allocation leading to vmcore and reboot of FPCs/REs on the chassis. This PR introduces changes to handle such assert conditions gracefully and to avoid FPC/RE crash. The guideline of rebooting the entire chassis when configuration change is made is still valid. |
PR Number | Synopsis | Category: FreeBSD Kernel Infrastructure |
1450093 | EX4300 : CLI config "on-disk-failure" is not supported Product-Group=junos |
On an EX4300 switch, the CLI configuration "set chassis routing-engine on-disk-failure disk-failure-action (reboot | halt)" is not supported. |
PR Number | Synopsis | Category: "ifstate" infrastructure |
1439906 | FPC might reboot if jlock hog occurs on all Junos VM based platforms Product-Group=junos |
On a JUNOS VM using TSC clocking from the host system, "jlock hog" messages may be seen. This may lead to FPCs reboot. |
PR Number | Synopsis | Category: Path computation client daemon |
1472825 | Manually configured ERO on NS controller lost when PCEP session bounced Product-Group=junos |
On all Junos platform with Path Computation Element Protocol (PCEP) enabled, if PCEP session bounced druing Routing Engine (RE) switchover on a LSP ingress router, unexpacted delete message might be sent from Path Computation Client (PCC) to Path Computation Element (PCE) with North Star (NS) controller. In the end, manually configured explicit route object (ERO) for RSVP-TE based label switched path (LSP) on NS controller will be lost. However, traffic go through ERO set on NS controller is still normal. |
PR Number | Synopsis | Category: vMX Platform Infrastructure related issue tracking |
1453967 | The VMX might work abnormally in large topology Product-Group=junos |
In a large topology composed by hundreds VMX platforms, some of the VMX platforms might work abnormally, both VCP and VFP might work very slow or become unresponsive. This issue has service/traffic impact. |
PR Number | Synopsis | Category: PTP related issues. |
1421811 | PTP might not work on MX104 if phy-timestamping is enabled Product-Group=junos |
On MX104 platform with any 2-port license installed on 10G interfaces and phy-timestamping enabled in PTP, PTP might not work. |
1451950 | FPC core may be seen after changing the configuration of PTP or Synchronous Ethernet. Product-Group=junos |
On the ACX/MX/QFX platform with PTP (Precision Time Protocol)/SyncE (Synchronous Ethernet) enabled, if configuration changes for the PTP/SyncE are combined with multiple events, the FPC core might be seen. |
1458581 | The "FPC X major errors" alarm may be raised after committing the PTP configuration change Product-Group=junos |
On MX router with MPC5/MPC6/MPC7/MPC8/MPC9/MPC10 installed environment, after committing the PTP configuration change, the "FPC X major errors" alarm may be raised. This issue may cause interface flap and traffic loss. |
PR Number | Synopsis | Category: Chassis mgmt for all QFX systems - chassis MIB, alarms, CLI |
1456742 | The laser from the 10G SFP+ interface is still on when the interface is disabled or the device is rebooted Product-Group=junos |
On the QFX5210/QFX5110/QFX5100 platform, the laser is still emitting from 10G SFP+ port even though the interface is disabled or the device is rebooted. It will cause the peer's interface is still up and might impact traffic. |
PR Number | Synopsis | Category: QFX Control Plane Kernel related |
1421250 | A vmcore is seen on QFX VC Product-Group=junos |
On QFX Series Virtual Chassis during shutdown, if an interrupt is received, the system gets into this state and vmcore is observed. |
1421250 | A vmcore is seen on QFX VC Product-Group=junosvae |
On QFX Series Virtual Chassis during shutdown, if an interrupt is received, the system gets into this state and vmcore is observed. |
1457414 | The PFE process might crash after RE (routing-engine) switchover on QFX10K platforms Product-Group=junos |
On QFX10K platforms, the PFE process might crash after routing engine (RE) switchover if the device has GRE(Generic Routing Encapsulation) or p2p interface configuration. The issue is due to the internal tokens allocated for GRE or p2p interfaces on master RE are not sent to backup RE. Since these tokens are not available on backup RE, there will be issues post GRES (Graceful Routing Engine Switchover) as the new master will end up creating same tokens as the old master. These tokens are already received by PFE from old master, the PFE will reject the new tokens and may panic. |
PR Number | Synopsis | Category: QFX platform optics related issues |
1497947 | lcmd core seen on QFX5210064C Product-Group=junosvae |
The LCMD process is the Linux Chassis Management Management Daemon. Due to a bug in the I2C handling in the daemon, a core dump may be seen. There is no specific user-visible trigger for the core dump and you may see several erroneous alarms when the core dump occurs. These should clear after the daemon automatically restarts |
PR Number | Synopsis | Category: QFX PFE Class of Services |
1472771 | DSCP marking might not work as expected if the fixed classifiers are applied to interfaces on QFX5000/EX4600 platforms Product-Group=junos |
On QFX5000/EX4600 platforms, if the interfaces are configured with the fixed classifiers, when some specific configuration changes are committed, for example, the same forwarding-class is applied to two different interfaces at the same time, and then the forwarding-class for one of the interfaces is changed and committed to a different value, the Differentiated Services code point (DSCP) marking might not be able to work as expected since both physical interfaces are still having the same forwarding-class mapped in the hardware table due to this issue. |
PR Number | Synopsis | Category: QFX L2 PFE |
1497993 | Traffic might get dropped if AE member interface is deleted/added or a SFP of the AE member interface is unplugged/plugged Product-Group=junos |
On QFX5K/EX46xx platforms, if STP is configured on vlan but the AE interface which is part of that vlan is not configured with STP, after an AE member interface is deleted or a SFP of the AE member interface is unplugged, and when the deleted AE member interface is added back or the unplugged SFP is plugged again, traffic via that AE interface might get dropped. LACP and LLDP traffic are not affected by this issue. |
PR Number | Synopsis | Category: KRT Queue issues within RPD |
1501817 | Traffic blackhole might be seen in fast-reroute scenario Product-Group=junos |
From Junos release 17.2R1-S8 the session fast-reroute is enabled by default in PFE (Packet Forwarding Engines). In the platform using unilist (one kind of indirect next-hop) as route next hop type for multiple paths scenario (such as BGP PIC or ECMP), if BGP PIC or ECMP-FRR is used, In case of that the version-id of session-id of indirect next-hop (INH) is above 256, PFE might not respond to session update and hence it might cause the session-id permanently to be stuck with the weight of 65535 in PFE. It might lead PFE to have a different view of UNILIST against load-balance selectors. Then, the BGP PIC and the ECMP-FRR might not work properly, the traffic blackhole might be seen. |
PR Number | Synopsis | Category: multicast source distribution protocol |
1485206 | There might be rpd memory leak in a certain looped MSDP scenario Product-Group=junos |
On all Junos platforms running in the Multicast Source Discovery Protocol (MSDP) scenario, if there are multiple overlapping mesh groups existing in the topology, for example, node A and B belong to mesh group M, node A and D belong to mesh group N, while node B and D belong to a different mesh group O, the Source Active (SA) messages sent from node A might get continously looped due to this issue. This might lead to the rpd memory leak and 100% CPU utilization. |
PR Number | Synopsis | Category: SRX Argon module bugs |
1480005 | The flowd or srxpfe process might stop when advanced anti-malware service is used. Product-Group=junos |
On all multiple-threads SRX Series devices with Advanced Anti-MalWare service used, in a rare condition that a deadlock might occur among multiple threads, which results in the flowd/srxpfe crash. |
PR Number | Synopsis | Category: Stout PF fabric (SFB2) |
1461356 | Traffic might be impacted because the fabric hardening is stuck Product-Group=junos |
Fabric hardening (FH) is the process of controlling bandwidth degradation to prevent traffic black hole. When FH is processing, if SFB/SCB get failure, FH process will be stuck, which will get traffic lost. |
PR Number | Synopsis | Category: Issues related to broadband edge apps (PPP, DHCP) on Trio ch |
1496265 | "PFEIFD: Could not decode media address with length 0" error messages generated by PFE when subscribers come up over a pseudowire interface. Product-Group=junos |
The error message "PFEIFD: Could not decode media address with length 0" can be observed when subscribers come up over a pseudowire interface, but there is no functional impact. |
PR Number | Synopsis | Category: Trio pfe bridging, learning, stp, oam, irb software |
1488251 | MAC learning under bridge-domain stops after MC-LAG interface flap Product-Group=junos |
MAC learning under bridge-domain over MC-LAG interface stops after MC-LAG interface flap |
PR Number | Synopsis | Category: Trio pfe l3 forwarding issues |
1341610 | Syslog error messages Err] PFEIFD: Could not decode media address with length 0 may be generated by PFE Product-Group=junos |
The error message "PFEIFD: Could not decode media address with length 0" may be observed shortly after commit, but there is no functional impact. |
PR Number | Synopsis | Category: Configuration mgmt, ffp, load-action, commit processing |
1468119 | Daemons might not be started if "commit" is executed after "commit check" Product-Group=junos |
in Junos OS Release 16.2R1 and later, if "commit" is executed after "commit check", the daemon (for example, dhcpd and sampled) might not get started even after the related configuration is successfully committed. |
PR Number | Synopsis | Category: UI Infrastructure - mgd, DAX API, DDL/ODL |
1465171 | Commit script does not apply changes in private mode unless a commit full is performed Product-Group=junos |
Commit script does not apply changes in private mode unless a commit full is performed. |
PR Number | Synopsis | Category: ESWD |
---|---|---|
1192520 | GARPs being sent from the switch once in 10 minutes Product-Group=junos |
GARPs were being sent whenever there is a mac (fdb) operation (add or delete). This is now updated to send GARP when interface is UP & l3 interface attached to the vlan. |
PR Number | Synopsis | Category: SFI Infra-structure |
1485038 | JDI-RCT: EX 9251 Summit-B54 : Observed Error IFDE: Null uint32 set vector, ifd and IFFPC: 'IFD Ether uint32 set' (opcode 151) failed continuously in AD with base configurations Product-Group=junos |
EX 9251 Summit-B54 : "IFDE: Null uint32 set vector, ifd and IFFPC: 'IFD Ether uint32 set' (opcode 151) error message is observed continuously in AD with base configurations. |
PR Number | Synopsis | Category: EX9200 Platform |
1448368 | EX9214 : Error "errorlib_set_error_log(): err_id(-1718026239)" are observed after reboot and macsec enabled link flap Product-Group=junos |
On the EX9214 device, if the MACsec-enabled link flaps after reboot, the error "errorlib_set_error_log(): err_id(-1718026239)" is observed. |
PR Number | Synopsis | Category: QFX PFE CoS |
1510365 | Traffic might be forwarded to wrong queue when fixed classifier is used Product-Group=junosvae |
If L2 access or vlan bridge IFL is created after fixed classifier is applied, the traffic matching the fixed classifier might be forwarded in unexpected queue, it might cause congestion unexpectedly hence there is traffic impact. |
PR Number | Synopsis | Category: QFX L3 data-plane/forwarding |
1481987 | Multicast traffic loss could be seen in certain conditions while enabling IGMP snooping under EVPN-VXLAN ERB scenario Product-Group=junos |
On QFX5110 & QFX5120 platform, which is running as Layer 3 VxLAN gateway, if "igmp-snooping" is enabled in partial but not for all bridge-domains, multicast traffic loss could be observed in non-igmp snooping bridge-domains. |
PR Number | Synopsis | Category: PRs related to channelized E1/T1 mic |
1442820 | JDI MMX REGRESSIONS: ALTIUS:T1 mode interfaces link protocol is not coming up with cisco-hdlc encapsulation Product-Group=junos |
mode interfaces link protocol is not coming up with cisco-hdlc encapsulation |
PR Number | Synopsis | Category: Class of Service |
1329141 | CoS is incorrectly applied on Packet Forwarding Engine, leading to egress traffic drop. Product-Group=junos |
On ACX5K/EX4600/QFX5100 series platforms, in some cases, CoS configuration is not applied appropriately in the Packet Forwarding Engine, leading to unexpected egress traffic drop on some interfaces. |
PR Number | Synopsis | Category: Express PFE L2 fwding Features |
1442587 | The PMTUD might not work for both IPv4 and IPv6 if the ingress L3 interface is an irb Product-Group=junos |
Path MTU Discovery (PMTUD) is a standardized technique for determining the maximum transmission unit (MTU) size on the network path between two IP hosts, usually with the goal of avoiding IP fragmentation. On QFX10K platforms, the PMTUD might not work for both IPv4 and IPv6 if the ingress L3 interface is an irb. The corresponding ICMP Fragmentation Needed packet to the sender might be dropped silently, then PMTUD fails. This issue has service impact. |
PR Number | Synopsis | Category: PTX Express ASIC interface |
1418425 | Traffic loss could be seen for duration of hold-time down timer when flapping an interface with hold-time down timer configured Product-Group=junos |
On PTX with FPC3 installed, traffic loss could be seen for duration of hold-time down timer when flapping an interface with hold-time down timer configured. |
PR Number | Synopsis | Category: Category for JET(JUNOS Extension Toolkit) related issues |
1400597 | The mgd-api crash due to memory leak Product-Group=junos |
Memory leak in mgd-api then core dump. |
PR Number | Synopsis | Category: jpppd daemon |
1488302 | MPLS VPN label can point to discard next-hop after RE switchover without NSR if egress interface is pp0 Product-Group=junos |
After RE switchover without non-stop routing (NSR) on the broadband network gateway (BNG), some VRF routing instances may experience blackholing for traffic destined to the hosts behind static PPPoE subscriber's CPE device. The affected routing instances are configured without 'vrf-table-label' knob and have a static route configured with pp0.xxx interface as a next-hop like: user@router> show configuration routing-instances TEST instance-type vrf; interface pp0.1000; route-distinguisher 65000:1000; vrf-target target:65000:1000; routing-options { static { route 10.0.0.0/24 next-hop pp0.1000; <<<< } } |
PR Number | Synopsis | Category: Flow Module |
1434757 | Intermittent packet drop might be observed if IPsec is configured. Product-Group=junos |
On all SRX platforms with Junos 18.2R1 onwards, if IPsec VPN is configured, intermittent packets drop might be seen. |
1489276 | GRE/IPSec tunnel might not come up when 'set security flow no-local-favor-ecmp' command is configured Product-Group=junos |
On SRX or vSRX clusters, when 'set security flow no-local-favor-ecmp' is configured, GRE/IPSec tunnel might not come up. |
PR Number | Synopsis | Category: PFE infra to support jvision |
1456275 | Queue data might be missing from path '/interfaces/interface/state' Product-Group=junos |
On subscribing to '/interfaces/interface/state/' it might get subscribed to '/junos/system/linecard/interface/traffic/' internally, instead of '/junos/system/linecard/interface/queue/' which might impact traffic. |
PR Number | Synopsis | Category: Layer2 forwarding on EX/NTF/PTX/QFX |
1406691 | Some interfaces of AE bundle might go to the detached state after the bulk configurations change on QFX5K platforms Product-Group=junos |
On QFX5000 platforms with scaled setup of the aggregated Ethernet (ae) bundles and VLANs, if Link Aggregation Control Protocol (LACP) is enabled, and there are scaled configuration changes, for example, delete 4000 VLANS/VXLANs and reapply them again, some interfaces of ae bundle might go to the detached state. Due to this issue, the running routing protocols (for example, LACP and BGP) will go down over the affected ae bundles. |
PR Number | Synopsis | Category: MX2010 platform software |
1388076 | JDI-RCT:M/Mx: errors @ Failed to get xfchip which_xfchip 7, CMTY_FM_HSL2: [cmty_fm_hsl2_adc_xbar_set_cell_limit_per_link] xbar limit set failed pb_slot[3], pfe[1], sfb_slot[7], sub_plane[2], link_index[83] during ISSU from 17.3 to 18.2 in MX2010 box Product-Group=junos |
required to update |
PR Number | Synopsis | Category: FreeBSD Kernel Infrastructure |
1442376 | EX2300 platforms might stop forwarding traffic or responding to console Product-Group=junos |
On EX2300/EX2300-C platforms, if Junos OS is with FreeBSD kernel version 11 with the build date on or after 2019-02-12, the switch might stop forwarding traffic or responding to console. A reboot is required to restore the service. |
PR Number | Synopsis | Category: TCP/UDP transport layer |
1394370 | The command "commit synchronize" might fail because several internal connections are stuck Product-Group=junos |
Command "commit synchronize" might fail due to kernel TCP socket stuck, the stuck can also result in login failure to the Backup RE from Master RE or to an FPC. |
PR Number | Synopsis | Category: vMX Platform Infrastructure related issue tracking |
1423575 | Junos OS: vMX and MX150: Denial of Service vulnerability in packet processing (CVE-2020-1627) Product-Group=junos |
A vulnerability in Juniper Networks Junos OS on vMX and MX150 devices may allow an attacker to cause a Denial of Service (DoS) by sending specific packets requiring special processing in microcode that the flow cache can't handle, causing the riot forwarding daemon to crash. By continuously sending the same specific packets, an attacker can repeatedly crash the riot process causing a sustained Denial of Service. Refer to https://kb.juniper.net/JSA11006 for more information. |
1474118 | [MX150] Core dump's not seen under "show system core-dumps" Product-Group=junosvae |
Unable to see generated cores in "show system coredumps" output, when using host name with "." in between. |
PR Number | Synopsis | Category: PTP related issues. |
1507782 | CLI knob to configure announce-interval as -3 so that the announce messages rate will be set to 8pps Product-Group=junos |
In PTP environment some vendor devices acting as slave expecting announce messages at an interval of -3 (8pps) from upstream master device. As of today announce message are configurable in range of 0 to 3. To support the above requirement engineering provided a hidden cli knob "set protocol ptp master announce-interval -3". In the networks/design where we have this requirement we can configure the hidden cli otherwise regular cli which is in the range (0 to 3) can be configurable. Both the cli knobs are mutually exclusive, commit error is expected if both are configured. This new change is applicable to ACX platforms only excluding ACX5k. |
PR Number | Synopsis | Category: Interface related issues. Port up/down, stats, CMLC , serdes |
1475851 | [Tencent] ULC-30Q28 FPC major error after system boot up or fpc restart Product-Group=junos |
FPC is reporting Major Error because of SHUTDOWN ERI failure during BIST with repair on HMC having FW version >= 0x9c. BIST with repair is incorporated during boot up, so this Major Error will be reported during boot up having FW>=0x9c on HMC. During debugging, its found that this ERI is getting issued even before the HMC was brought up which is resulting into this Error. So added bringup steps for HMC before the BIST procedure starts as done for vale-ptx. |
PR Number | Synopsis | Category: QFX ISSU Infrastructure |
1490799 | After ISSU/ISSR, a port using SR4/LR4 optics may not come up Product-Group=junos |
On QFX5100/5200 platforms, a port using SR4/LR4 optics might not come up after ISSU (In-Service Software Upgrade)/ISSR (In-Service Software Reboot). |
PR Number | Synopsis | Category: QFX platform optics related issues |
1382803 | FEC error counts not updating for QFX5110 Product-Group=junos |
On QFX5110, interface FEC counter does not work though FEC function has been supported. Added stats counter support through this PR. |
PR Number | Synopsis | Category: QFX L2 PFE |
1500825 | On QFX5100, ERPS may not work correctly Product-Group=junos |
On QFX5100, ERPS may not work correctly on branch which as 1473610 fix, due to stp instance programming failure in hardware. |
PR Number | Synopsis | Category: Resource Reservation Protocol |
1505834 | The rpd process might crash with RSVP configured in a rare timing case Product-Group=junos |
On all Junos platforms running with the Resource Reservation Protocol (RSVP) configured, when some socket error happens, RSVP might be unable to send message, however the counter for sent messages has already been increased due to the software design defect. The wrong counter might lead to the rpd process crash. It's a rare timing issue and it might be more likely to happen in a scaled scenario. |
PR Number | Synopsis | Category: MPC7/8/9 Interface Issues |
1436275 | Link flapping with QSFPP-4X10GE-LR on MX204/MX10003 or MPC7E/8E/9E Product-Group=junos |
On MX Series routers with MPC7E, MPC8E, or MPC9E installed, if optics QSFPP-4X10GE-LR (Part number 740-054050) is used, the link might flap. |
1440526 | CPU might hang or interface might be stuck down on particular 100G port on MX/EX/PTX Product-Group=junos |
On MX/EX/PTX, if particular 100G port is used, CPU might hang or interface might be stuck down on the 100G port. This issue may cause traffic disruption in the network. |
1441816 | Egress stream flush failure and traffic blackhole might occur Product-Group=junos |
Egress stream flush failure and silent dropping of traffic could occur in a rare occasion for a repeatedly flapping link on MPC7E, MPC8E, MPC9E cards, MX204 and MX10003. |
PR Number | Synopsis | Category: Trio pfe bridging, learning, stp, oam, irb software |
1385585 | Packet drops might be seen if the packet header is over 252 bytes Product-Group=junos |
On MX platform, if the packet is encapsulated twice and the packet header is over 252 bytes, the packet will be dropped. |
PR Number | Synopsis | Category: Trio pfe l3 forwarding issues |
1444186 | GRE packets which are larger than MTU get dropped on MX204 platforms when sampling is enabled on the egress interface Product-Group=junos |
On MX204 platforms, if GRE packet length exceeds MTU of gr interface and the egress interface is configured with sampling, it might cause GRE packet to be dropped because the reassembled packet's checksum is incorrect. |
Getting Up and Running with Junos
Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search