20.2R1-S2: Software Release Notification for JUNOS Software Version 20.2R1-S2

Junos Software service Release version 20.2R1-S2 is now available.

20.2R1-S2 - List of Fixed issues

PR Number	Synopsis	Category: EX driver issues
1515689	The IP communication between directly connected interfaces on EX4600 would fail Product-Group=junosvae	The IP communication between directly connected interfaces on EX4600 TVP platforms would fail. This issue only might occur in this special scenario and it might have traffic/service impact.
PR Number	Synopsis	Category: Cassis XQ related issues
1464297	The error of "SCHED L4NP[0] Parity errors" might be seen on the MX platform with XQ chip Product-Group=junos	This PR along with an earlier PR1232952 address the issue completely, so JUNOS version in question should have fix for these two PRs to address this issue completely.
PR Number	Synopsis	Category: QFX Access control list
1521763	Firewall "sample" configuration gives the warning as unsupported on QFX10002-36q and will not work. Product-Group=junos	On QFX10002-36q, when inline-jflow is configured, the IPv4 firewall filter with 'sample' action gives a waring "unsupported platform" and will not work. On the other hand, the IPv6 firewall filter with 'sample' action will still work as expected.
PR Number	Synopsis	Category: JUNOS kernel/ukernel changes for ACX
1483959	The packets might not get processed on the interfaces after ISSU Product-Group=junos	On ACX5048/ACX5096 platforms, there might be issues with packet processing on the interfaces post ISSU. The upgrade happens without any issue, however, after the upgrade, the ports does not get enabled in PFE (Packet Forwarding Engine) which might result in traffic loss. This issue is seen when an internal register value gets reset to 0 during ISSU.
PR Number	Synopsis	Category: ACX GE, 10GE, PoE, IDT framers
1430009	gigether-options knob enabled again under interface hierarchy Product-Group=junos	gigether-options and ether-options both are support on ACX5k PR1430009 initially opened to remove gigether-options, now it has been reverted. Revert has been tracked in the same PR 1430009. Yes, latest fix of PR 1430009 has added back gigether-options
PR Number	Synopsis	Category: ISIS routing protocol
1514867	ISIS-SR routes might not be updated to reflect the change in SRMS advertisements Product-Group=junos	On all Junos platforms, ISIS protocol running with Segment Routing and LDP, if both ISIS levels are enabled on all routers and if conflicting ISIS Segment Routing Mapping Server(SRMS) advertisements are present across the ISIS topology, removal of the preferred SRMS advertisement by the originating node might not be reflected in the corresponding ISIS SR routes on the other nodes. The Labeled-ISIS (ISIS-SR) routes might not be updated to reflect the change in SRMS advertisements. This could potentially lead to traffic drops.
PR Number	Synopsis	Category: JSR Infrastructure
1479156	The vSRX may restart unexpectedly Product-Group=junos	The srxpfe process generates core files when a socket-open error occurs during the initialization phase. Self-healing takes place when the srxpfe reboots and starts processing traffic.
PR Number	Synopsis	Category: IPSEC/IKE VPN
1438311	Ping-icmp test is failing after configuring ecmp routes over multipoint tunnel interface VPNs Product-Group=junos	On vSRX3.0 instances, when ECMP routes are configured to load balance over multiple IPSec VPNs connected to a single multipoint tunnel interface, the traffic may not flow. This issue applies to Junos OS Release 19.2R1 and higher releases.
PR Number	Synopsis	Category: Layer 2 Circuit issues
1511783	The rpd might crash after removing the last interface configured under the l2circuit neighbor Product-Group=junos	On all Junos platforms, rpd crash may be observed after removing the last interface configured under the l2circuit neighbor which is in fact active.
PR Number	Synopsis	Category: FreeBSD Kernel Infrastructure
1518898	The kernel might crash if a file/directory is accessed for the first time and is not created locally Product-Group=junos	On the Junos with Virtual Filesystem (VirtFS), if a file/directory is accessed for the first time and is not created locally, the kernel might crash and generate a vmcore file. Junos might reboot due to this issue.
PR Number	Synopsis	Category: Used for tracking OVSDB software issues and features
1518807	The vgd core might get generated when OVSDB server resarts Product-Group=junos	On all Junos platforms that support OVSDB (Open vSwitch database), the vgd core might get generated when the OVSDB server is restarted. The vgd daemon restart after the core might cause traffic impact. This issue happens when OVSDB server is disconnected and the device (switch/router) sends some updates events to server.
PR Number	Synopsis	Category: vMX Platform Infrastructure related issue tracking
1493805	Viewing a large file from vFPC console may hog the console. Product-Group=junos	Viewing a large file from vFPC console using ?cat? application may hog the console.
PR Number	Synopsis	Category: RPD route tables, resolver, routing instances, static routes
1507638	On all JUNOS dual-RE GRES/NSR enabled routers, RPD might crash on a new master RE (Routing Engine) if RE switchover happened right after massive routing-instances deletion Product-Group=junos	If GRES and NSR are enabled at a dual-RE router and if RE switchover happens (either manually or due to some other reasons) right after deleting a big number of routing instances, then RPD at a new master RE could crash once. Once a new master RPD crashed, it will restart by itself.
PR Number	Synopsis	Category: Trio pfe bridging, learning, stp, oam, irb software
1502867	Traffic originated from another subnet is sent out with 0x8100 instead of 0x88a8 Product-Group=junos	On the MX platforms with MPC7/8/9 installed, when an interface configured with vlan-tags outer tpid (tag protocol ID) 0x88a8 on these line cards, traffic originated from another subnet will be sent out with 0x8100. It will cause traffic to get dropped at the remote site.
PR Number	Synopsis	Category: DDos Support on MX
1464549	With multiple different fixed-sized traffic streams configured at 1000000 fps (40 gbps combined rate) on an aggregated Ethernet0 along with another independent aggregated Ethernet (aggregated Ethernet1, 50 percent line rate 4 streams bi-directional => 118 gbps combined traffic rate) both hosted on a single Packet Forwarding Engine instruction of MPC11E line card, causes small varying packet drops every iteration on the aggregated Ethernet1 on disabling the aggregated Ethernet0. The drops might vary from 200 Product-Group=junos	With multiple different fixed-sized traffic streams configured at 1,000,000 fps (40 Gbps combined rate) on aggregated Ethernet0 along with another independent aggregated Ethernet interface (aggregated Ethernet1, 50 percent line rate 4 streams bidirectional => 118 Gbps combined traffic rate), both hosted on a single Packet Forwarding Engine instruction of an MPC11E line card, small varying packet drops occurs for every iteration on aggregated Ethernet1 on disabling aggregated Ethernet0. The drops might vary from 200 to certain 1000 frames.
PR Number	Synopsis	Category: UI Misc
1457602	The version information under the configuration changes from Junos OS release 19.1. Product-Group=junos	Under configuration on 19.x, version info is different from prior 18.x release.
PR Number	Synopsis	Category: Unified Services Framework
1529224	Non-impacting error "IFP error> ../../../../../../../../../src/pfe/usp/control/applications/interface/ifp.c@3270:(errno=1000) tunnel session add failed" is seen in the message logs. Product-Group=junos	SPC3 related 'IFP tunnel session add' messages in the logs.

20.2R1-S2 - List of Known issues

PR Number	Synopsis	Category: EX4300 PFE
1515234	[dhcp] [DHCP_RELAY] JDI_DHCP_REGRESSION_MOJITO::DHCP Binding is not happening after Graceful Switchover Product-Group=junos	After GRES, interfaces may flap due to which DHCP bindings may be lost.
PR Number	Synopsis	Category: Continuation Engineering issues
1474449	Changing the framing modes on a CHE1T1 MIC between E1 and T1 on a MPC3E NG HQoS line card causes the PIC to go offline. Product-Group=junos	Changing framing modes on a CHE1T1 MIC between E1 and T1 on a MPC3E NG HQoS line card will cause the PIC to go offline.
PR Number	Synopsis	Category: JUNOS kernel/ukernel changes for ACX
1509402	PFE crash might be seen and the FPC may remain down on ACX710 platform Product-Group=junos	On ACX710 platform, after the PTP(Precision Time Protocol) configuration is removed and the router is rebooted, the PFE might crash and the FPC remains down if PTP traffic is still coming into the router. This issue might also happen when SyncE is configured. This causes the router to crash and not come up.
PR Number	Synopsis	Category: ACX L3 IPv4, IPv6 support
1517280	JDI ACCESS REGRESSION[bgp] [Neighbor_Flap] Traffic switch over time is more expected while verifying the bgp route in ACX5048 Product-Group=junos	In scenario where BGP-PIC with ISIS as IGP, the control plane converges taking 9000 msec on failing the link towards DUT to move the traffic over to backup path. This is observed only in 20.2 release.
PR Number	Synopsis	Category: the SMGD redundancy plugin in SMGD
1515743	[bbe-redundancy-plugin] [all] MX960 :: JDI BBE REGRESSION:Redundancy-state is not properly getting updated after Bringing down the link (toward server) by deactivating the interface Product-Group=junos	Dev to provide content
PR Number	Synopsis	Category: Bi Directional Forwarding Detection (BFD)
1453705	On the MX2010 Series routers, the BFD session on the IS-IS step up flaps during the ISSU - FRU upgrade stage. Product-Group=junos	Bfd session flaps during ISSU only in mpc7e card(Bfd sessions from other cards of DUT to peer routers did not flap during ISSU). Issue is not seen frequently.
PR Number	Synopsis	Category: Firewall Filter
1524836	Firewall family inet filter enhanced-mode is not committing on MPC7E 100G port Product-Group=junos	Once the enhanced-mode is enabled for the 100G ports, the system was not committing the change, and with this fix the issue is fixed and now working as expected.
PR Number	Synopsis	Category: Ethernet OAM (LFM)
1347250	Junos OS: MX Series: PFE on the line card may crash due to memory leak. (CVE-2020-1651) Product-Group=junos	On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine (PFE) on the line card to crash and restart, causing traffic interruption. Refer to https://kb.juniper.net/JSA11038 for more information.
PR Number	Synopsis	Category: IPSEC/IKE VPN
1517262	The flowd might crash in IPsec VPN scenario Product-Group=junos	On SRX platforms with IPsec VPN configured, the flowd might crash during the IPsec VPN rekey window. The traffic/service might be impacted if hitting this issue.
PR Number	Synopsis	Category: FreeBSD Kernel Infrastructure
1505864	The installation fails when upgrading from legacy Junos to specific BSDx based Junos Product-Group=junos	The installation might fail when upgrading from legacy Junos (before Junos 15.1) to higher BSDx based Junos releases (Junos 15.1 and after).
PR Number	Synopsis	Category: QFX EVPN / VxLAN
1510794	QFX5K : EVPN-VXLAN : EVPN-VXLAN : Multicast traffic loss due to few multicast routes missing in Spine node Product-Group=junos	In an EVPN-VXLAN scenario, multicast traffic may not reach to Spine to form (S,G) in PIM enabled Spines. Issue might happen due to various triggers including multiple rollback of configs on Spine, interface flap, clear bgp.
PR Number	Synopsis	Category: KRT Queue issues within RPD
1493723	Traffic loss is observed after ISSU, while enable/disable and activate/deactivate the interface Product-Group=junos	Traffic loss is observed after ISSU, while enable/disable and activate/deactivate the interface
1495925	VPLS Flood NH might not get programmed correctly Product-Group=junos	In a VPLS scenario after an NSR Routing Engine switchover, the Flood Nexthop ID for VPLS instance might not get synched between master and backup RE which could lead to the traffic loss for that VPLS instance.
PR Number	Synopsis	Category: UI Infrastructure - mgd, DAX API, DDL/ODL
991081	The configuration change on Backup RE cannot be synchronized while deleting inactivated interfaces/routing-instances from master Product-Group=junos	In the dual Routing Engine scenario, the backup Routing Engine does not sync up the configuration change while deleting an inactivated interface/routing-instances from the master. So after the operation, the inactivated interface/routing-instances still exists on the backup Routing Engine.

Knowledge Base