20.2R2-S2: Software Release Notification for JUNOS Software Version 20.2R2-S2

Junos Software service Release version 20.2R2-S2 is now available.

20.2R2-S2 - List of Fixed issues

PR Number	Synopsis	Category: EX4300 VC implementation
1526493	EX4300-48MP device might go out of service during a software upgrade operation Product-Group=junosvae	On EX4300-48MP platform, when a software upgrade operation is issued, the storage available for the Junos virtual Machine(VM), at the hypervisor level, can fall low. This can result in the Junos VM going into a hung or paused state. A reboot of the device is required to restore service on the device.
PR Number	Synopsis	Category: MX Layer 2 Forwarding Module
1546631	MAC learning issue might happen when EVPN-VXLAN is enabled. Product-Group=junos	On MX platform, with Ethernet VPN and Virtual Extensible LANs (EVPN-VXLAN) implemented, Address Resolution Protocol (ARP) requests received on VXLAN tunnel endpoint (VTEP) might not forward to customer edge (CE) side or Proxy ARP role on VTEP might not work properly. This issue could happen when knob 'no-arp-suppression' is disabled under EVPN instance combined with static VXLAN implementation. Please refer to workaround provided when this issue hit.
PR Number	Synopsis	Category: MIBs related to BBE
1535754	Snmp mib walk for jnxSubscriber OIDs returns General error Product-Group=junos	Snmp mib walk for jnxSubscriber OIDs returns General error
PR Number	Synopsis	Category: Border Gateway Protocol
1541768	The rpd process generates the core file at gp_rtarget_tsi_update,bgp_rtarget_flash_rt,bgp_rtarget_flash. Product-Group=junos	If RTarget module tries to take an access of the active route which does not exist (since NextHop is not resolved), a reference is taken on the non-existent active route, and rpd crashes.
1557604	Multipath info still shown for BGP route even after disabling interface for one path Product-Group=junos	Multipath info still shown for BGP route even after disabling interface for one path
PR Number	Synopsis	Category: MX Platform SW - Mastership Module
1557413	ISSU may be aborted on MX devices for version 20.2R2-S1 Product-Group=junos	On MX480/960/2010 platforms and version 20.2R2-S1 ISSU maybe aborted in below 2 cases: 1.ISSU from other branches to 20.2R2-S1 2.ISSU from 20.2R2-S1 to other branches.
PR Number	Synopsis	Category: EVPN ELAN/E-TREE
1555679	The ARP packets from the CE device are added with VLAN tag if the VLAN-ID is configured in the EVPN routing instance. Product-Group=junos	On the ACX5448/ACX710 series platforms working as PEs in an EVPN scenario, if 'vlan-id none' is configured for an EVPN routing instance, ARP packets received from CEs or hosts within this EVPN instance may not be encapsulated properly on the ACX devices, causing failed traffic connectivity between CEs/hosts.
1559084	On the ACX5448 router, the unicast packets from the CE devices might be forwarded by the PE devices with additional VLAN tag if IRB is used. Product-Group=junos	On ACX5448 in EVPN-MPLS scenario with IRB configured, if vlan-id none is configured in the EVPN instance, when unicast packets from CE to remote CE are received at ACX5448, additional VLAN tag is added by ACX5448 while forwarding the same on the core link. There is traffic loss due to this issue.
PR Number	Synopsis	Category: Firewall Module
1521325	The TCP packet might be dropped if syn-proxy protection is enabled. Product-Group=junos	On SRX series devices, if TCP SYN flood protection is enabled with TCP SYN Proxy and the 3rd and 4th packet from the client arrive at the same time, then it can cause an SEQ error that may break the TCP connection.
PR Number	Synopsis	Category: IPSEC/IKE VPN
1530684	On all SRX Series devices using IPsec with NAT traversal, MTU size for the external interface might be changed after IPsec SA is re-established. Product-Group=junos	On all SRX series devices using IPsec with NAT Traversal, MTU size might be changed to a lower value for the ike external interface after IPsec SA is re-established.
PR Number	Synopsis	Category: PFE infra to support jvision
1547698	SENSOR APP DWORD leak is observed during the period of churn for routes bound to the sensor group. Product-Group=junos	SENSOR APP DWORD leak observed during the period of churn for routes bound to Sensor group. Sensor types that are affected are Segment Routing, Segment Routing-TE, LDP and RSVP LSPs.
PR Number	Synopsis	Category: Issues related to Junos licensing infrastructure
1558017	Licenses for features VRRP, CFM, QINQ, VXLAN, MCLAG, ESI-LAG, LFM/ethernet-oam might incorrectly show as invalid licenses Product-Group=junos	In Release 20.2, some features will show up as a licensed feature. Customer would see alarms, commit warnings and "show system license" output as below. However, there would be no functional impact. admin@QFX5120> show system license License usage: Licenses Licenses Licenses Expiry Feature name used installed needed esi-lag 1 0 1 invalid
PR Number	Synopsis	Category: MPC11 ULC fabric software related issues.
1546449	Plane offline IPC of chassisd may time out on MX devices with MPC11E linecards Product-Group=junos	On MX2010/MX2020 with MPC11E linecards, plane offline IPC event might be stuck and the line cards may restart. This issue may happen if there is a run time CRC error on Cascaded PFE and when both the planes associated with the link fault are made offline.
PR Number	Synopsis	Category: Issues related to PKI daemon
1525924	Certificate validation might fail when OCSP is used and the OCSP server is a dual-stack device. Product-Group=junos	When IPSec and PKI are used on SRX platforms, two VPN peers are using OCSP and the OCSP server is dual-stack device, if revocation check is configured for certificate, the certificate validation might fail and the IPSec tunnel is not established.
PR Number	Synopsis	Category: vMX Platform Infrastructure related issue tracking
1548422	Traffic with jumbo frame may be discarded on the vMX platforms Product-Group=junos	On the VMX platforms which are installed on ESXI 6.7 with vmxnet3 driver, traffic with jumbo frame (Packets with MTU more than 1500) may be discarded upon receiving.
PR Number	Synopsis	Category: Chassis mgmt for all QFX systems - chassis MIB, alarms, CLI
1481143	Chassisd cores might happen on backup RE after commit on QFX10Ks due to CHASSISD_MAIN_THREAD_STALLED for 200 seconds Product-Group=junos	Chassisd cores might happen on the backup RE after commit on QFX10K8/16s due to CHASSISD_MAIN_THREAD_STALLED for 200 seconds.
1558407	Amber LEDs seen for fan modules in QFX5120 after upgrade to 20.2R1 Product-Group=junosvae	QFX5120-48Y after upgrade 20.2R1 -- and later releases -- the fan modules' Amber LEDs are on continuously even if there is no fault in the fans.
PR Number	Synopsis	Category: QFX Platform related (SYSLOG/ALARMS/miscellaneous)
1539654	Cannot take RSI properly due to Authentication error Product-Group=junosvae	On QFX10k and PTX10k series which is running on 20.X release, cannot collect RSI properly due to authentication error.
PR Number	Synopsis	Category: Filters
1472206	On the QFX5000 line of switches, the egress ACL filter entries is only 512 in Junos OS Release 19.4R1. Product-Group=junosvae	On QFX5K platforms with 19.4R1 release, the Egress ACL filter entries will be only 512 instead of 1022. If we configure an Egress PACL/RACL/VACL filter more than 512 terms, the filter might not be installed.
PR Number	Synopsis	Category: SW PRs for SCBE3 fabric
1553641	The fabric errors are observed and the FPC processes might get offlined with SCBE3, MPC3E-NG, or MPC3E and MPC7 or MPC10 in the increased-bandwidth fabric mode. Product-Group=junos	On MX240/MX480/MX960 platforms, with default "increased-bandwidth" fabric mode and SCBE3, if we have MPC3 or MPC3-NG exist on the system along with high bandwidth MPC, during high traffic situation or bursty traffic through the fabric towards MPC3/MPC3-NG. MX fabric might report unreachable destination condition and causes fabric healing to trigger in. This issue is exacerbated when having MPC7 or MPC10 line cards installed due to high fabric bandwidth that can be generated.
PR Number	Synopsis	Category: usf inline feature related issues
1547647	The nsd daemon may crash after configuring the inline NAT in USF mode Product-Group=junos	On MX240/480/960 platforms, the nsd daemon might crash after configuring the inline NAT in USF mode. This might be caused due to the new memory debugging framework introduced in NSD daemon to track allocated or free memory.

20.2R2-S2 - List of Known issues

PR Number	Synopsis	Category: Bi Directional Forwarding Detection (BFD)
1453705	On the MX2010 Series routers, the BFD session on the IS-IS step up flaps during the ISSU - FRU upgrade stage. Product-Group=junos	Bfd session flaps during ISSU only in mpc7e card(Bfd sessions from other cards of DUT to peer routers did not flap during ISSU). Issue is not seen frequently.
PR Number	Synopsis	Category: IDP policy
1543571	Need syslog to indicate signature download completion Product-Group=junos	<29>1 2020-10-04T22:41:50.822-07:00 dpidev-siege-05 idpd 2639 IDP_SECURITY_DOWNLOAD_RESULT [junos@2636.1.1.1.2.136 status="Done;Successfully downloaded from(https://services.netscreen.com/cgi-bin/index.cgi). Version info:3320(Fri Oct 2 05:22:33 2020 UTC, Detector=12.6.160200828)"] security package download result(Done;Successfully downloaded from(https://services.netscreen.com/cgi-bin/index.cgi). Version info:3320(Fri Oct 2 05:22:33 2020 UTC, Detector=12.6.160200828))
PR Number	Synopsis	Category: High Availability/NSRP/VRRP
1548173	Disabled node on SRX cluster sent out ARP request packets Product-Group=junos	Disabled state node on an SRX cluster may send ARP requests when the primary of RG0 and 1 are on different nodes
PR Number	Synopsis	Category: all logging related bugs on srx platforms
1520071	FQDN-based security log stream does not dynamically update the IP address. Product-Group=junos	RTLOG will leave FQDN in the configuration and query as needed (TTL expiration) and update the PFE
PR Number	Synopsis	Category: IPv6/ND/ICMPv6 issues
1570999	RE0 REBOOTED WITH VMCORE DUMP @ip6_key_extract, calculate_route,ip6_recv_input Product-Group=junos	The device crashes whenever there is a malformed IPV6 packet hitting it. Bad IPV6 packet meaning some IPv6 packet with invalid options, or if the length of the packet is less than minimum. RE is seen to reboot post the core dump.
PR Number	Synopsis	Category: JUNOS Network App Infrastructure (for ping, traceroute, etc)
1463622	The cosmetic error messages of NTP time synchronization might be seen during device booting Product-Group=junos	In NTP with the boot-server scenario, when the router or switch boots, the NTP daemon sends ntpdate request to poll the configured NTP boot-server to determine the local date and time. If the ntpdate is not activated correctly while the device is booting, the ntpdate might not work successfully. Then, some cosmetic error messages of time synchronization might be seen, but there is no impact with time update because the NTP daemon will update the time eventually.
PR Number	Synopsis	Category: Issues related to PKI daemon
1560374	High CPU usage on pkid process might be seen when the device is unable to connect to a particular CRL URL Product-Group=junos	On all SRX platforms, if the device is unable to connect to a particular CA certificate CRL URL then high CPU usage on pkid process might be observed.
PR Number	Synopsis	Category: MPC7/8/9 Interface Issues
1473280	The following error message might appear: Failed to complete DFE tuning. This error message has no functional impact and can be ignored. Product-Group=junos	Even with the fix for PR 1463015, the "Failed to complete DFE tuning" syslog may appear. This message has no functional impact and can be ignored.
PR Number	Synopsis	Category: SRX-1RU platfom related protocol, QoS, filtering features et
1569471	For SRX4200 to enable GRE queuing need to enable tunnel-queuing Product-Group=junos	For SRX4200 to enable GRE queuing need to enable tunnel-queuing
PR Number	Synopsis	Category: ZT/YTpfe bridging, learning, stp, oam, irb software
1435855	Layer 2 over GRE is not supported in Junos OS Release 19.3R1. Even though, the configuration gets committed, the feature does not work. Product-Group=junos	On MPC10E 3D MRATE-15xQSFPP, L2 over GRE is not supported. Although the configuration gets committed, the feature does not work.
PR Number	Synopsis	Category: UI Infrastructure - mgd, DAX API, DDL/ODL
991081	The configuration change on Backup RE cannot be synchronized while deleting inactivated interfaces/routing-instances from master Product-Group=junos	In the dual Routing Engine scenario, the backup Routing Engine does not sync up the configuration change while deleting an inactivated interface/routing-instances from the master. So after the operation, the inactivated interface/routing-instances still exists on the backup Routing Engine.
1543037	The license errors may get returned on backup RE when trying to commit the configuration Product-Group=junos	On all Junos platforms, when trying to commit the configuration, license errors may get returned on backup RE even though the license is installed correctly. This issue doesn't have any service impact.
PR Number	Synopsis	Category: Virtual Router Redundancy Protocol
1558560	Junos device might send VRRP advertisement packets in VRRP init or idle state before startup-silent-period timer expiry after performing GRES on VRRP master device with NSR disabled Product-Group=junos	If VRRP master device has dual Routing Engines (REs) and GRES enabled but nonstop-routing (NSR) disabled, after performing GRES, both REs will move to VRRP init then idle state and the new master RE will send VRRP advertisement packets in this stage before startup-silent-period timer expiry. Since the VRRP backup device can still receive the VRRP advertisement packets with higher priority, it will not transition to VRRP master state and hence cause the longer traffic downtime until the VRRP master device re-take the VRRP mastership after startup-silent-period timer expiry.

Knowledge Base