Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

18.3R3-S6: Software Release Notification for JUNOS Software Version 18.3R3-S6

0

0

Article ID: TSB18172 TECHNICAL_BULLETINS Last Updated: 27 Sep 2021Version: 1.0
Alert Type:
SRN - Software Release Notification
Product Affected:
ACX, EX, MX, PTX, QFX, NFX, SRX, VRR, vMX, vSRX
Alert Description:
Junos Software Service Release version 18.3R3-S6 is now available for download from the Junos software download site
Download Junos Software Service Release:
  1. Go to Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts
Risk Risk Description
Low/Notification - No defined time impact to take action Software Release Notification
Impact Impact Description
Low/Notification - Monitor the situation but no action needed Software Release Notification

Solution:

Junos Software service Release version 18.3R3-S6 is now available.

18.3R3-S6 - List of Fixed issues

PR Number Synopsis Category: MX10K platform
1325946 Chassisd process memory leak issue on MX10008/MX10016 platform which might cause traffic loss.
Product-Group=junos
Without any significant trigger events, chassisd process on active Routing-Engine for MX10008 and MX10016 platforms keeps leaking memory. When chassisd memory usage is reaching ~3.5GB it may crash and trigger RE switchover. In some production cases, such RE switchover has triggered temporary traffic impact even on NSR/GRES enabled systems. The rate of memory leak is depending on how many optics/SFPs the system has. Rate of leak = 'Number of optics/SFPs under the system has' * 16Bytes per every 6 seconds.
PR Number Synopsis Category: QFX access control list
1606256 Multicast streams may stop flooding in VXLAN setup
Product-Group=junos
In VXLAN with multicast used scenario, multicast traffic might not get flooded if the multicast IP is in one of the IP range (224.0.0.32 - 224.0.0.255). This is because a newly introduced dynamic filter only works for non-VxLAN traffic.
PR Number Synopsis Category: QFX L2 PFE
1602914 Traffic drop might be observed on QFX5K platforms in virtual chassis scenario when firewall filter is configured
Product-Group=junos
On QFX5k platforms in the Virtual chassis scenario, when the firewall filter is applied over the AE interface and AE is having only one child member from FPC0 and there are no child members from FPC1, all the packets flowing through backup FPC will be dropped.
PR Number Synopsis Category: qfx-sw-mclag
1605234 MAC move may be seen between the ICL and MC-LAG interface if adding/removing VLANs on the ICL interface
Product-Group=junos
On QFX/EX platforms with MC-LAG used, if adding/removing VLANs on the ICL (the interchassis link) interface which is used to forward data packets link between two MC-LAG peers, a continuous MAC move might be seen between the ICL and MC-LAG interface. When this happens, it will cause traffic drop due to the flooding as a consequence of the MAC moves.
 

18.3R3-S6 - List of Known issues

PR Number Synopsis Category: BBE database related issues
1465277 The jdhcpd process might consume a high CPU and no further subscribers can be brought up
Product-Group=junos
When DHCP sessions are brought up on the EX4300-32F (3 GB DRAM & acting as DHCP relay/server), if any DHCP operation (e.g. request, release, renew coming from the different interface after MAC move of DHCP subscribers) happens at higher rates per second which translates to an update to the DHCP sessions, jdhcpd daemon might consume high CPU (e.g. 70%) and operations may take potentially long time. This will prevent clients from getting the IP addresses and no further subscribers can be brought up. Fix: >> A new memory band for SDB (subscriber database) has been introduced, which will help heal the situation. >> This fix is applicable to EX4300-32F only.
PR Number Synopsis Category: QFX Control Plane VXLAN
1501117 The 12ald process might crash in a rare condition under EVPN-VxLAN scenario.
Product-Group=junos
On all Junos platforms with EVPN-VxLAN multihoming scenario, if incorrect MAC move happens within the same ESI (Ethernet Segment Identifiers) bridge-domain, the l2ald process might crash. This is a rare timing issue.
PR Number Synopsis Category: Express PFE FW Features
1432116 The FPC might crash when a firewall filter is modified.
Product-Group=junos
In QFX10K/PTX series platforms, if a firewall filter with multiple match conditions is configured on interfaces which are Up and the firewall filter is modified (either a new action is added or the condition is added/removed etc.), the FPC might crash and restart. It might affect the service/traffic.
PR Number Synopsis Category: User Firewall related issues
1605933 Memory leak at the useridd process might be observed when Integrated User Firewall is configured
Product-Group=junos
On SRX-Series devices having Integrated User Firewall enabled with Active Directory as the authentication source, memory leak might be observed at the useridd process.
PR Number Synopsis Category: FreeBSD Kernel Infrastructure
1602005 Upgrade might fail when upgrading from legacy release
Product-Group=junos
On all platforms (For SRX, only SRX5k with RE-1800x4) while directly upgrading from Junos with FreeBSD 6 (e.g. 15.1X49 or before) to the affected releases, the system will check the USB connection. The upgrading will fail if there is no USB device detected during the upgrading process.
PR Number Synopsis Category: Kernel Multicast Infrastructure
1569957 FPC might crash in a multicast scenario
Product-Group=junos
On EX Series switches and PTX Series routers with aggregated Ethernet interface(s), FPC crash might be seen after GRES. It might be seen when the device is configured with a multicast scenario. Composite next hops for multicast routes are present over aggregated Ethernet child links. After child member(s) of thea ggregated Ethernet interface flap, there is a sync issue between primary Routing Engine and backup Routing Engine, which causes the FPC to crash.
PR Number Synopsis Category: PTX Broadway based PFE MPLS-LSPs RSVP VPNs tcc ccc software
1466659 IPv6 traffic might be dropped in a Layer 3 VPN network.
Product-Group=junos
On certain PTX and QFX platforms, IPv6 traffic might get affected in the L3VPN scenario between CEs.
PR Number Synopsis Category: QFX EVPN / VxLAN
1604393 Duplicate packets may be seen during bringing up all the interfaces on the spine switch
Product-Group=junos
On the QFX5K platforms with EVPN-VxLAN configured, duplicate packets will be seen during bringing down and bringing up all the interfaces on the spine switch where type-2 and type-5 tunnels are established. This issue will persist for a short period until the spine installs the type-2 VTEP (VxLAN Tunnel End Point) towards the leaves.
PR Number Synopsis Category: RPD Next-hop issues including indirect, CNH, and MCNH
1602007 The IPv6 traffic might be impacted on the QFX/PTX platforms when an IPv6 route resolves over a dynamic tunnel
Product-Group=junos
On the QFX/PTX platforms, if an IPv6 route resolves over a dynamic tunnel, and the forwarding route for the dynamic tunnel is a direct interface route, if the interface is not configured with an IPv6 address, then the dynamic tunnel might be in down state.
PR Number Synopsis Category: Issues related to control plane security
1425231 The rpd will crash continuously if MD5 authentication on any protocols is used along with master-password
Product-Group=junos
On all Junos platforms running 64-bit mode rpd, the rpd will crash continuously if MD5 authentication on any protocols (such as MD5 authentication for BGP/ISIS/OSPF) is used along with master password.
PR Number Synopsis Category: All Asgard Platform Related Issues
1335526 The ppmd process might crash after an upgrade on SRX platforms
Product-Group=junos
On SRX platforms with Bidirectional Forwarding Detection (BFD) enabled for multiple protocols (such as OSPF, ISIS, BGP, PIM), the ppmd process might crash after an upgrade.
PR Number Synopsis Category: Junos Automation, Commit/Op/Event and SLAX
1604622 File download using "request system download" might fail
Product-Group=junos
On a EX4400 device, any files scheduled for download using the cli command "request system download" might fail due to error. The files can be downloaded using normal ftp/scp commands on the device.
Modification History:
First publication 2021-09-23
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search