Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

19.4R2-S1: Software Release Notification for JUNOS Software Version 19.4R2-S1

0

0

Article ID: TSB17827 TECHNICAL_BULLETINS Last Updated: 24 Jul 2020Version: 1.0
Alert Type:
SRN - Software Release Notification
Alert Description:
Junos Software Service Release version 19.4R2-S1 is now available for download from the Junos software download site
Download Junos Software Service Release:
  1. Go to Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts
Solution:

Junos Software service Release version 19.4R2-S1 is now available.

19.4R2-S1 - List of Fixed issues

PR Number Synopsis Category: QFX Access control list
1497133 Firewall filter could not work in certain conditions under VC setup
Product-Group=junos
On EX4650/QFX5120 with Virtual Chassis setup, the firewall filter (egress direction) could not work when traffic goes across VCP (Virtual Chassis Port) link.
PR Number Synopsis Category: BBE OS Infrastructure library
1481278 [subscriber_services/bbe-os/] [all] Issue with binding Non-default routing-instance to existing soft-gre group
Product-Group=junos
The issue is seen when you add the tunnel-routing-instance to existing soft-gre group the code does not recognise that the route has changed (due to routing-instance change) and that the old route needs to be deleted and new route added with new routing-instance.
PR Number Synopsis Category: PTX10003 Platform related issues
1498572 "login-tip" and "login-alarms" does not work as expected on certain PTX platforms running Junos Evolved
Product-Group=junos
"login-tip" and "login-alarms" does not work as expected on certain PTX platforms running Junos Evolved
PR Number Synopsis Category: PFE SW evo-pfemand,packet-io on BRCM platforms running EVO
1497909 QFX5220-32CD and QFX5220-128C: evo-pfemand core file is seen if loopback filter is applied with input-list and after switch is rebooted.
Product-Group=junos
On the QFX5220/QFX5130 platforms, if configuring the input-list or output-list filter on an interface, after rebooting the switch, it may cause the evo-pfemand crash and all interfaces are not created. Finally, the switch is unusable.
PR Number Synopsis Category: EVPN Layer-2 Forwarding
1498023 The l2ald memory leak may be observed in any EVPN scenario
Product-Group=junos
In any EVPN scenario (for example, active-active multi-homing mode, active-standby multi-homing mode, EVPN-VXLAN, or EVPN-MPLS), the l2ald memory might slowly come up when the local CE device or core face interfaces continuously flap. If the memory of l2ald is exhausted, it causes the l2ald to crash.
PR Number Synopsis Category: IDP attack detection in the subscriber qmodules
1497340 The IDP attack detection might not work in a specific situation
Product-Group=junos
In IDP scenario, if the total number of applications including predefined applications and the custom configured applications exceeds 4096, the IDP attack detection might fail.
PR Number Synopsis Category: flow ha module
1501018 SRX4100/4200 is not able to detect SPU failure through chassis info blob
Product-Group=junos
On the SRX4100/SRX4200 platform, internal failures(flowd crash/reboot FPCs/restart chassis-control etc) cannot be detected by the jsrpd
PR Number Synopsis Category: JSR Infrastructure
1505864 The installation fails when upgrading from legacy Junos to specific BSDx based Junos
Product-Group=junos
The installation fails when upgrading from legacy(non-BSDx) Junos to specific BSDx based Junos releases.
PR Number Synopsis Category: Firewall Network Address Translation
1473788 Not all NAT sessions are synced from Node1 to Node2
Product-Group=junos
Not all of the NAT sessions are getting synced from Node1 to Node2 on the SRX4100/SRX4200 platform when L3-HA mode is configured.
PR Number Synopsis Category: Layer 2 VPN related issues
1502003 The rpd crash could be seen in certain conditions after deleting l2circuit configuration
Product-Group=junos
On all Junos platforms with l2circuit local-switching configuration, if "connection-protection", "backup-neighbor" and "l2circuit traceoptions" are configured, the rpd crash could be seen when removing the complete l2circuit configuration.
PR Number Synopsis Category: MX104 Software - Chassis Daemon
1453893 FPC/PFE crash may happen with ATM MIC installed in the FPC
Product-Group=junos
FPC crash on MX240 and MX2020 routers or Packet Forwarding Engine crash on MX104 routers might happen when the MIC-3D-8OC3-2OC12-ATM is installed and ATM interface is configured.
PR Number Synopsis Category: QFX L2 PFE
1497993 Traffic might get dropped if AE member interface is deleted/added or a SFP of the AE member interface is unplugged/plugged
Product-Group=junos
On QFX5K/EX46xx platforms, if STP is configured on vlan but the AE interface which is part of that vlan is not configured with STP, after an AE member interface is deleted or a SFP of the AE member interface is unplugged, and when the deleted AE member interface is added back or the unplugged SFP is plugged again, traffic via that AE interface might get dropped. LACP and LLDP traffic are not affected by this issue.
PR Number Synopsis Category: SFW, CGNAT on MS-MIC/MS-MPC (XLP)
1496211 The B4 might not able to establish the softwire with AFTR
Product-Group=junos
In dual-stack lite (DS-Lite) scenario, if the DS-Lite softwire-initiator (such as B4) and the Address Family Transition Router (AFTR, it acted as softwire-concentrator) is deployed with service-set included multiple softwire-rules, the wrong rule-id might be chosen for the traffic including either normal data packet or Port Control Protocol (PCP) mapping requested from the basic bridging broadband (B4) subscribers. It might cause the failures on the allocation of subscribers and choice of softwire sessions, then the subscribers behind the B4 are unable to establish a softwire (an IPv4-over-IPv6 tunnel) to AFTR.
PR Number Synopsis Category: SSL Proxy functionality on JUNOS
1505013 19.4R2 SecPDT: During longevity test found lcore-slave on vSRX HA device slt104-orange
Product-Group=junos
When SSL proxy is enabled on a vSRX device, and if the device runs out of memory a crash might be observed in the SSL proxy module.
PR Number Synopsis Category: Trio pfe bridging, learning, stp, oam, irb software
1502867 Traffic originated from another subnet is sent out with 0x8100 instead of 0x88a8
Product-Group=junos
On the MX platforms with MPC7/8/9 installed, when an interface configured with vlan-tags outer tpid (tag protocol ID) 0x88a8 on these line cards, traffic originated from another subnet will be sent out with 0x8100. It will cause traffic to get dropped at the remote site.
1503947 MPCs may crash when there is a change on routes learnt on IRB interface configured in VPLS/EVPN instances
Product-Group=junos
On MX platforms, when an IRB interface is configured in VPLS/EVPN instances, MPCs might crash if the routes learnt on the IRB interface change.
PR Number Synopsis Category: Configuration mgmt, ffp, load-action, commit processing
1499265 The commit check might fail when adding IFL into a routing-instance which having no-normalization knob enabled under routing-instances stanza
Product-Group=junos
The change by PR 1433542 (which is fixed in 18.3R3 18.4R3 19.1R2 19.2R2 19.3R1) causes commit check to fail. This happens when "no-normalization" is configured under a routing-instances stanza for a routing-instance with any of the following interface configuration - "vlan-id all", "vlan-id inner-all", "input-vlan-map", "output-vlan-map", "vlan-id-list", "vlan-id-range", "vlan-tags inner-list", "vlan-tags inner-range".
PR Number Synopsis Category: usf alg related issues
1500355 The SPC3 card might crash if SIP ALG is enabled
Product-Group=junos
On MX240/480/960 with SPC3 card, if SIP (Session Initiation Protocol) ALG (Application Layer Gateway) is enabled, the SPC3 card might crash when processing the SIP ALG service. Traffic disruption might be seen during the SPC3 crash.
 

19.4R2-S1 - List of Known issues

PR Number Synopsis Category: HW Board, FPGA, CPLD issues
1503655 JDI-RCT :PDT_onyx2member-VC_IPCLOS: pfe will stuck in init state for one or two member with tcp connection timeout error
Product-Group=junos
_onyx2member-VC_IPCLOS: pfe will stuck in init state for one or two member with tcp connection timeout error
PR Number Synopsis Category: QFX L3 data-plane/forwarding
1486632 On QFX 5100-48T-6Q VC/VCF, Observed error message "rcp for member 14, failed" while copying image to VCF member. when trying to downgrade the image
Product-Group=junos
On QFX 5100-48T-6Q VC/VCF, Observed error message "rcp for member 14, failed" while copying image to VCF member. when trying to downgrade the image
1500508 On QFX5100 VC/VCF : Observing traffic loss on multiple traffic streams after reboot and flapping the interfaces of the VC node
Product-Group=junos
On QFX5100 VC/VCF : Observing traffic loss on multiple traffic streams after reboot and flapping the interfaces of the VC node
1508133 Traffic loss observed in BGP streams while doing the triggers GRES & Reboot with base configurations
Product-Group=junos
On QFX5100-VC, traffic loss is observed in BGP streams while doing the triggers GRES & Reboot with base configurations.
PR Number Synopsis Category: Device Configuration Daemon
1476199 Failure to configure proactive ARP detection
Product-Group=junos
When trying to configure proactive ARP detection configuration under interface, the configuration may fail to commit.
PR Number Synopsis Category: Layer 3 forwarding, both v4+v6
1519372 IPV6 neighbor state change causes "Local Outlif" to leak by two values leads to DNX_NH::dnx_nh_tag_ipv4_hw_install errors
Product-Group=junos
On ACX5448/ACX5448-D, PFE memory exhaustion is reported due to continuous IPv6 neighbor flaps.
PR Number Synopsis Category: Flow Module
1493174 L3-HA - Not able to clear the warm sessions on the peer SRX devices
Product-Group=junos
Introduce a CLI command "clear security flow session session-state warm" for user when there are still warm sessions after "clear security flow session".
PR Number Synopsis Category: flow ha module
1509082 L3-ha - Interfaces were not coming up after restarting JSRPD
Product-Group=junos
l3-ha shutdown interfaces will not come up in case of jsrpd restart. This is a known product limitation for l3ha feature at 17.4X2. The workaround is to remove shutdown interface configs and rollback 1.
PR Number Synopsis Category: Firewall Network Address Translation
1494431 Huge continuous drops on primary Node after it comes up from reboot on SRX4100/SRX4200
Product-Group=junos
On the SRX4100/SRX4200 platform, huge continuous drops are seen on the primary Node after it comes up from the reboot in L3-HA mode
PR Number Synopsis Category: Platform infra to support jvision
1497343 The MPC10E line card might restart with sensord crash on it due to a timing issue
Product-Group=junos
The sensord daemon along with the sensor of "/junos/system/cmerror/configuration" is enabled by default on MPC10E no matter Junos Telemetry Interface (JTI) is configured or not. There is a use-after-free issue during processing CMError configuration data in sensord, which is a timing issue. This issue could cause sensord to crash and the related MPC10E line card to restart.
PR Number Synopsis Category: Layer 2 Control Module
1473610 ERPS might not come up properly when MSTP and ERPS are enabled on the same interface.
Product-Group=junos
When both "Multiple Spanning Tree Protocol " (MSTP) and Ethernet Ring Protection Switching" ERPS are enabled on the same interface, then ERPS does not come up properly.
PR Number Synopsis Category: MX104 Software - Chassis Daemon
1453893 FPC/PFE crash may happen with ATM MIC installed in the FPC
Product-Group=junos
FPC crash on MX240 and MX2020 routers or Packet Forwarding Engine crash on MX104 routers might happen when the MIC-3D-8OC3-2OC12-ATM is installed and ATM interface is configured.
PR Number Synopsis Category: PTX10K Routing Engine
1503169 A few TCP-based application sessions might flap upon RE switchover or application sessions bouncing at the backup RE on PTX10008/PTX10016 router
Product-Group=junos
In a rare case on a PTX10008/PTX10016 router with dual Routing Engines (RE) and GRES/NSR enabled, a few TCP-based application sessions like BGP/LDP might flap upon RE switchover or application (protocol) sessions bouncing at the backup RE. Once those sessions flap, they will be re-established automatically. The TCP sessions re-connection will impact the respective routing protocol sessions and therefore could impact the traffic. This is a timing issue; the more TCP-based application sessions the router has established prior the switchover, the higher chances to hit the issue. Usually when the issue happens, only a few TCP sessions are getting affected and not all of them.
PR Number Synopsis Category: QFX L2 PFE
1515254 On QFX5000 and EX46xx with VXLAN enabled , ARP request may get dropped if storm control is configured
Product-Group=junos
ARP request get dropped on QFX5000 and EX46xx devices when all of the following condition are met. 1.Storm control is enabled on any of the port. 2.VXLAN is enabled 3.Arp-suppression is enabled.
PR Number Synopsis Category: QFX VC Infrastructure
1497563 Virtual Chassis is not stable with a channelization interface
Product-Group=junos
In QFX5110 platform with Virtual Chassis (VC) scenario, VC might not get formed and can cause traffic loss if the 100G VCP ports are deleted and created, or changed from 40G to 100G or vice-versa. For the reason is that Forward Error Correction (FEC) should not be enabled when the physical interface is working as a VCP port.
1498485 Onyx VC: Vmcore observed after VC split event
Product-Group=junos
[vc_vcf] [HA] QFX-Hardening: Onyx VC: Vmcore observed after VC split event
PR Number Synopsis Category: Issues related to broadband edge apps (PPP, DHCP) on Trio ch
1514152 CST:ISSU:Loss of PPPoE subscribers during ISSU from 19.4R2.6 to 19.4R2.6 in ps0 interface
Product-Group=junos
Loss of PPPoE subscribers during ISSU from 19.4R2.6 to 19.4R2.6,out of 28k PPPoE subscribers only 375 where logged in again after ISSU.
PR Number Synopsis Category: UI Misc
1457602 The version info under configuration is changed from release 19.1
Product-Group=junos
Under configuration on 19.x, version info is different from prior 18.x release.
PR Number Synopsis Category: ZT pfe l3 forwarding issues
1462775 Inline BFD session might flap on renegotiation of timers from slow to aggressive interval
Product-Group=junos
On MX platforms with MPC10E/MPC11E, the Inline BFD session might flap on the transition from slow to aggressive timers.
Modification History:
First publication date 2020-07-24
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search