Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

20.2R1-S2: Software Release Notification for JUNOS Software Version 20.2R1-S2

0

0

Article ID: TSB17858 TECHNICAL_BULLETINS Last Updated: 15 Sep 2020Version: 1.0
Alert Type:
SRN - Software Release Notification
Product Affected:
ACX, EX, MX, PTX, QFX, NFX, SRX, VRR, vMX, vSRX
Alert Description:
Junos Software Service Release version 20.2R1-S2 is now available for download from the Junos software download site
Download Junos Software Service Release:
  1. Go to Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts
Solution:

Junos Software service Release version 20.2R1-S2 is now available.

20.2R1-S2 - List of Fixed issues
PR Number Synopsis Category: EX driver issues
1515689 The IP communication between directly connected interfaces on EX4600 would fail
Product-Group=junosvae
The IP communication between directly connected interfaces on EX4600 TVP platforms would fail. This issue only might occur in this special scenario and it might have traffic/service impact.
PR Number Synopsis Category: Cassis XQ related issues
1464297 The error of "SCHED L4NP[0] Parity errors" might be seen on the MX platform with XQ chip
Product-Group=junos
This PR along with an earlier PR1232952 address the issue completely, so JUNOS version in question should have fix for these two PRs to address this issue completely.
PR Number Synopsis Category: QFX Access control list
1521763 Firewall "sample" configuration gives the warning as unsupported on QFX10002-36q and will not work.
Product-Group=junos
On QFX10002-36q, when inline-jflow is configured, the IPv4 firewall filter with 'sample' action gives a waring "unsupported platform" and will not work. On the other hand, the IPv6 firewall filter with 'sample' action will still work as expected.
PR Number Synopsis Category: JUNOS kernel/ukernel changes for ACX
1483959 The packets might not get processed on the interfaces after ISSU
Product-Group=junos
On ACX5048/ACX5096 platforms, there might be issues with packet processing on the interfaces post ISSU. The upgrade happens without any issue, however, after the upgrade, the ports does not get enabled in PFE (Packet Forwarding Engine) which might result in traffic loss. This issue is seen when an internal register value gets reset to 0 during ISSU.
PR Number Synopsis Category: ACX GE, 10GE, PoE, IDT framers
1430009 gigether-options knob enabled again under interface hierarchy
Product-Group=junos
gigether-options and ether-options both are support on ACX5k PR1430009 initially opened to remove gigether-options, now it has been reverted. Revert has been tracked in the same PR 1430009. Yes, latest fix of PR 1430009 has added back gigether-options
PR Number Synopsis Category: ISIS routing protocol
1514867 ISIS-SR routes might not be updated to reflect the change in SRMS advertisements
Product-Group=junos
On all Junos platforms, ISIS protocol running with Segment Routing and LDP, if both ISIS levels are enabled on all routers and if conflicting ISIS Segment Routing Mapping Server(SRMS) advertisements are present across the ISIS topology, removal of the preferred SRMS advertisement by the originating node might not be reflected in the corresponding ISIS SR routes on the other nodes. The Labeled-ISIS (ISIS-SR) routes might not be updated to reflect the change in SRMS advertisements. This could potentially lead to traffic drops.
PR Number Synopsis Category: JSR Infrastructure
1479156 The vSRX may restart unexpectedly
Product-Group=junos
The srxpfe process generates core files when a socket-open error occurs during the initialization phase. Self-healing takes place when the srxpfe reboots and starts processing traffic.
PR Number Synopsis Category: IPSEC/IKE VPN
1438311 Ping-icmp test is failing after configuring ecmp routes over multipoint tunnel interface VPNs
Product-Group=junos
On vSRX3.0 instances, when ECMP routes are configured to load balance over multiple IPSec VPNs connected to a single multipoint tunnel interface, the traffic may not flow. This issue applies to Junos OS Release 19.2R1 and higher releases.
PR Number Synopsis Category: Layer 2 Circuit issues
1511783 The rpd might crash after removing the last interface configured under the l2circuit neighbor
Product-Group=junos
On all Junos platforms, rpd crash may be observed after removing the last interface configured under the l2circuit neighbor which is in fact active.
PR Number Synopsis Category: FreeBSD Kernel Infrastructure
1518898 The kernel might crash if a file/directory is accessed for the first time and is not created locally
Product-Group=junos
On the Junos with Virtual Filesystem (VirtFS), if a file/directory is accessed for the first time and is not created locally, the kernel might crash and generate a vmcore file. Junos might reboot due to this issue.
PR Number Synopsis Category: Used for tracking OVSDB software issues and features
1518807 The vgd core might get generated when OVSDB server resarts
Product-Group=junos
On all Junos platforms that support OVSDB (Open vSwitch database), the vgd core might get generated when the OVSDB server is restarted. The vgd daemon restart after the core might cause traffic impact. This issue happens when OVSDB server is disconnected and the device (switch/router) sends some updates events to server.
PR Number Synopsis Category: vMX Platform Infrastructure related issue tracking
1493805 Viewing a large file from vFPC console may hog the console.
Product-Group=junos
Viewing a large file from vFPC console using ?cat? application may hog the console.
PR Number Synopsis Category: RPD route tables, resolver, routing instances, static routes
1507638 On all JUNOS dual-RE GRES/NSR enabled routers, RPD might crash on a new master RE (Routing Engine) if RE switchover happened right after massive routing-instances deletion
Product-Group=junos
If GRES and NSR are enabled at a dual-RE router and if RE switchover happens (either manually or due to some other reasons) right after deleting a big number of routing instances, then RPD at a new master RE could crash once. Once a new master RPD crashed, it will restart by itself.
PR Number Synopsis Category: Trio pfe bridging, learning, stp, oam, irb software
1502867 Traffic originated from another subnet is sent out with 0x8100 instead of 0x88a8
Product-Group=junos
On the MX platforms with MPC7/8/9 installed, when an interface configured with vlan-tags outer tpid (tag protocol ID) 0x88a8 on these line cards, traffic originated from another subnet will be sent out with 0x8100. It will cause traffic to get dropped at the remote site.
PR Number Synopsis Category: DDos Support on MX
1464549 With multiple different fixed-sized traffic streams configured at 1000000 fps (40 gbps combined rate) on an aggregated Ethernet0 along with another independent aggregated Ethernet (aggregated Ethernet1, 50 percent line rate 4 streams bi-directional => 118 gbps combined traffic rate) both hosted on a single Packet Forwarding Engine instruction of MPC11E line card, causes small varying packet drops every iteration on the aggregated Ethernet1 on disabling the aggregated Ethernet0. The drops might vary from 200
Product-Group=junos
With multiple different fixed-sized traffic streams configured at 1,000,000 fps (40 Gbps combined rate) on aggregated Ethernet0 along with another independent aggregated Ethernet interface (aggregated Ethernet1, 50 percent line rate 4 streams bidirectional => 118 Gbps combined traffic rate), both hosted on a single Packet Forwarding Engine instruction of an MPC11E line card, small varying packet drops occurs for every iteration on aggregated Ethernet1 on disabling aggregated Ethernet0. The drops might vary from 200 to certain 1000 frames.
PR Number Synopsis Category: UI Misc
1457602 The version information under the configuration changes from Junos OS release 19.1.
Product-Group=junos
Under configuration on 19.x, version info is different from prior 18.x release.
PR Number Synopsis Category: Unified Services Framework
1529224 Non-impacting error "IFP error> ../../../../../../../../../src/pfe/usp/control/applications/interface/ifp.c@3270:(errno=1000) tunnel session add failed" is seen in the message logs.
Product-Group=junos
SPC3 related 'IFP tunnel session add' messages in the logs.
 

20.2R1-S2 - List of Known issues
PR Number Synopsis Category: EX4300 PFE
1515234 [dhcp] [DHCP_RELAY] JDI_DHCP_REGRESSION_MOJITO::DHCP Binding is not happening after Graceful Switchover
Product-Group=junos
After GRES, interfaces may flap due to which DHCP bindings may be lost.
PR Number Synopsis Category: Continuation Engineering issues
1474449 Changing the framing modes on a CHE1T1 MIC between E1 and T1 on a MPC3E NG HQoS line card causes the PIC to go offline.
Product-Group=junos
Changing framing modes on a CHE1T1 MIC between E1 and T1 on a MPC3E NG HQoS line card will cause the PIC to go offline.
PR Number Synopsis Category: JUNOS kernel/ukernel changes for ACX
1509402 PFE crash might be seen and the FPC may remain down on ACX710 platform
Product-Group=junos
On ACX710 platform, after the PTP(Precision Time Protocol) configuration is removed and the router is rebooted, the PFE might crash and the FPC remains down if PTP traffic is still coming into the router. This issue might also happen when SyncE is configured. This causes the router to crash and not come up.
PR Number Synopsis Category: ACX L3 IPv4, IPv6 support
1517280 JDI ACCESS REGRESSION[bgp] [Neighbor_Flap] Traffic switch over time is more expected while verifying the bgp route in ACX5048
Product-Group=junos
In scenario where BGP-PIC with ISIS as IGP, the control plane converges taking 9000 msec on failing the link towards DUT to move the traffic over to backup path. This is observed only in 20.2 release.
PR Number Synopsis Category: the SMGD redundancy plugin in SMGD
1515743 [bbe-redundancy-plugin] [all] MX960 :: JDI BBE REGRESSION:Redundancy-state is not properly getting updated after Bringing down the link (toward server) by deactivating the interface
Product-Group=junos
Dev to provide content
PR Number Synopsis Category: Bi Directional Forwarding Detection (BFD)
1453705 On the MX2010 Series routers, the BFD session on the IS-IS step up flaps during the ISSU - FRU upgrade stage.
Product-Group=junos
Bfd session flaps during ISSU only in mpc7e card(Bfd sessions from other cards of DUT to peer routers did not flap during ISSU). Issue is not seen frequently.
PR Number Synopsis Category: Firewall Filter
1524836 Firewall family inet filter enhanced-mode is not committing on MPC7E 100G port
Product-Group=junos
Once the enhanced-mode is enabled for the 100G ports, the system was not committing the change, and with this fix the issue is fixed and now working as expected.
PR Number Synopsis Category: Ethernet OAM (LFM)
1347250 Junos OS: MX Series: PFE on the line card may crash due to memory leak. (CVE-2020-1651)
Product-Group=junos
On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine (PFE) on the line card to crash and restart, causing traffic interruption. Refer to https://kb.juniper.net/JSA11038 for more information.
PR Number Synopsis Category: IPSEC/IKE VPN
1517262 The flowd might crash in IPsec VPN scenario
Product-Group=junos
On SRX platforms with IPsec VPN configured, the flowd might crash during the IPsec VPN rekey window. The traffic/service might be impacted if hitting this issue.
PR Number Synopsis Category: FreeBSD Kernel Infrastructure
1505864 The installation fails when upgrading from legacy Junos to specific BSDx based Junos
Product-Group=junos
The installation might fail when upgrading from legacy Junos (before Junos 15.1) to higher BSDx based Junos releases (Junos 15.1 and after).
PR Number Synopsis Category: QFX EVPN / VxLAN
1510794 QFX5K : EVPN-VXLAN : EVPN-VXLAN : Multicast traffic loss due to few multicast routes missing in Spine node
Product-Group=junos
In an EVPN-VXLAN scenario, multicast traffic may not reach to Spine to form (S,G) in PIM enabled Spines. Issue might happen due to various triggers including multiple rollback of configs on Spine, interface flap, clear bgp.
PR Number Synopsis Category: KRT Queue issues within RPD
1493723 Traffic loss is observed after ISSU, while enable/disable and activate/deactivate the interface
Product-Group=junos
Traffic loss is observed after ISSU, while enable/disable and activate/deactivate the interface
1495925 VPLS Flood NH might not get programmed correctly
Product-Group=junos
In a VPLS scenario after an NSR Routing Engine switchover, the Flood Nexthop ID for VPLS instance might not get synched between master and backup RE which could lead to the traffic loss for that VPLS instance.
PR Number Synopsis Category: UI Infrastructure - mgd, DAX API, DDL/ODL
991081 The configuration change on Backup RE cannot be synchronized while deleting inactivated interfaces/routing-instances from master
Product-Group=junos
In the dual Routing Engine scenario, the backup Routing Engine does not sync up the configuration change while deleting an inactivated interface/routing-instances from the master. So after the operation, the inactivated interface/routing-instances still exists on the backup Routing Engine.
 
Modification History:
First publication 2020-09-15
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search