Outstanding Issues

ALG

• On J6350 Services Routers handling more than 1000 simultaneous MGCP calls, the success rate for all MGCP ALG calls is approximately 95 percent. [PR/254297]

Authentication

• During user authentication, the firewall authentication table in the output of the security firewall-authentication users command displays multiple failures even though the network table in the output of show network-access requests statistics shows successful authentications. [PR/250780]

Flow

• Firewall filter counters for ingress (inbound) and egress (outbound) forwarding table filters (FTFs) do not work for IPv4. [PR/97230]
• OSPF over GRE over IPsec does not work. [PR/105279]
• Even when forwarding options are set to drop packets for the ISO protocol family, the router forms End System-to-Intermediate System (ES-IS) adjacencies and transmits packets because ES-IS packets are Layer 2 terminating packets. [PR/252957]

Infrastructure

• If the router does not have an ARP entry for an IP address, it drops the first packet from itself to that IP address. [PR/233867]
• If you enable security traceoptions, the log file might not be created in the default location at /var/log/security-trace. As a workaround, manually set the log file to the directory /var/log/security-trace. [PR/254563]

Interfaces and Chassis

• The link status of the onboard Gigabit Ethernet interfaces (ge-0/0/0 through ge-0/0/3) or the 1-port Gigabit Ethernet ePIM interface on J4350 and J6350 Services Routers fails when you configure these interfaces in loopback mode. [PR/72381]

Routing

• Asymmetric routing, such as tracing a route to a destination behind J-series routers running JUNOS software with enhanced services with Virtual Router Redundancy Protocol (VRRP), does not work. [PR/237589]

User Interfaces and Configuration

• A user cannot log in to the J-Web client through RADIUS or TACACS+ authentication if the user profile already has authorization parameters specified on the server side. As a workaround, ensure that the user profile parameters are not specified or are set with empty values on the server. [PR/94445]

WXC Integrated Services Module

• When two J-series routers with WXC Integrated Services Modules (ISM 200s) installed are configured as peers, traceroute fails if redirect-wx is configured on both peers. [PR/227958]