Open Issues
Learn about open issues in Junos OS Evolved Release 21.4R3 for PTX Series routers.
For the most complete and latest information about known Junos OS Evolved defects, use the Juniper Networks online Junos Problem Report Search application.
General Routing
-
When an aggregated Ethernet link is brought down, a transient error message: [Error] Nexthop: EalNhHandler: failed to add Nh: xxxx, type: composite, as pil add failed might be seen. There is no functional impact due to these errors. PR1570710
-
A vulnerability in the handling of exceptional conditions in Juniper Networks Junos OS Evolved allows an attacker to send specially crafted packets to the device, causing the Advanced Forwarding Toolkit manager (evo-aftmand-bt or evo-aftmand-zx) process to crash and restart, impacting all traffic going through the FPC, resulting in a Denial of Service (DoS). Please refer to https://kb.juniper.net/JSA11188 for more information. PR1572969
-
For PTX10001-36MR, the software driver reads the voltage threshold erroneously causing the Host 0 Voltage Threshold Crossed alarm to be present on the device. PR1592258
-
Several warning messages show up as rpd restarts while performing GRES on a system running Junos oS Evolved. PR1612487
-
On Junos OS Evolved PTX Series platforms, next-header match in IPv6 firewall filter does not work as expected. Next-header matches the payload-protocol (last-header) on Junos OS Evolved PTX Series platform. PR1645401 PR1648864.
-
PTX10001-36MR:IS-IS does not form adjacency due to 802.1Q tag included in packets through EVPN-VXLAN.PR1651461
-
Multiple rewrite rules aggregated Ethernet:
mpls-any
andmpls-inet-both-non-vpn
are not supported on PTX Series running BT ASIC. The order of applying the Rewrite rules is not correct. The non-VPN rewrite rule gets effect for the VPN traffic - See Rewriting MPLS and IPv4 Packet Headers.PR1655653 -
On all Junos OS Evolved platforms, an error log from rpd or kernel corresponding to JSR backup registration failed might be observed during extreme scenarios of rpd restart.PR1660685
-
Sometimes BGP and RSVP sessions remain down after quickly disabling and enabling arpd process. Whenever customer encounters such scenarios, the system can be recovered from erroneous state by executing
restart routing gracefully
in CLI.PR1665362 -
On adding filter to loopback interface, at times wrong count is seen for firewall policer. The workaround is to
clear firewall all
.PR1664600 -
On all Junos OS Evolved platforms, the process fabspoked-pfe crash might be observed while executing CLI commands for fabric statistics. Executing CLI commands specific to the status related to FBC and SIBs hits this issue.PR1669435
-
On restarting app msvscd, data does not get exported through UDP query.PR1670826
-
During GRES, out of order messages are seen as CNH delete comes first before the route change of MPLS route pointing to it. It is transient and CNh delete happens later when route change message arrives. PR1674101
Juniper Extension Toolkit (JET)
-
In Junos OS Evolved, there are two different gRPC Python files for each JAPI file. The names of the files are *pb2_grpc.py and *pb2.py. The stub creation functions are present in *pb2_grpc.py. PR1580789
-
Until Junos OS Evolved 21.3, release mgd is 32-bit binary. libsi can only be linked with 64-bit binaries. To access data or WAN ports in Junos OS Evolved, we need libsi to be linked with the binary. By default, the shell on the Junos OS Evolved device includes libsi, but it is not available to CLI commands as CLI makes mgd invoke cscript to run a Python script through CLI. PR1603437
MPLS
-
In Junos OS Evolved platforms, LDP session
authentication key-chain
configuration done based on session remote-id on initiator stops from session establishment even though the responder'sauthentication key-chain
is configured for its remote-id. PR1592431 -
Traceroute in MPLS OAM on SR over IPv6 might fail in ECMP case if Junos OS Evolved box is in topology. This is because linux kernel in Junos OS Evolved puts an autoflowlabel on every IPv6 packet. This flow label is transparent to daemon process, which uses a null value for it and calculates the NH details. The Packet Forwarding Engine however takes the flow label into account and calculates the NH details. This difference in calculation of NH details leads to a mismatch in the path the packet takes to the destination and can cause traceroute to fail. PR1618406
-
On all Junos OS Evolved platforms, the rpd core file might be seen in multi-instance RSVP scenario when a configuration file that has many RSVPs enabled routing-instances get overridden by another configuration file.PR1641045
-
The rpd crashes during
restart routing
if LDP periodic statistics collection is enabled.PR1666568
Network Management and Monitoring
-
When
maximum-password-length
is configured and the user tries to configure password and the password length exceeds configuredmaximum-password-length
, error is thrown, along with error <ok/> tag is also emitted. (Ideally <ok/> tag must not be emitted in an error scenario.) The configuration does not get committed. PR1585855 -
Junos OS Evolved has a feature to block or deny all hidden commands. Users can get this feature by configuring
set system no-hidden-commands
. However when this is configured and committed Junos OS Evolved blocks or denies new netconf or junoscript XML sessions. As a workaround users can deletesystem no-hidden-commands
configuration statement and start the new netconf or junoscript sessions. PR1590350 -
The mgd can crash when an invalid value is configured for identityref type leafs or leaf-lists while configuring Openconfig or any other third-party YANG. The problem happens with json and xml loads. PR1615773
Routing Policy and Firewall Filters
-
On Junos OS Evolved platforms for the 20.4R3 release, the unsupported configuration of BGP flow spec
interface-group exclude
might lead to some errors and Packet Forwarding Engine corruption which does not permit filter bind. PR1639391
Routing Protocols
-
The following scenario happens when we enable IS-IS authentication key-chain having multiple keys between routers. The IS-IS adjacency is up because both routers have the same key active. When we manually change the system time in such a way that routers have different keys active in the key chain, the IS-IS adjacency must go down. However, that is not happening. PR1572441
User Interface and Configuration
-
Passwordless authentication successful for configured user even after deleting ssh public key details from user login hierarchy. PR1625032
-
Configuration archival (transfer-on-commit) over FTP protocol does not work in Junos OS Evolved. The reason it does not work is, internally a FreeBSD utility (fetch) is used to transfer the archived file. Junos OS Evolved is based on Linux and the fix or solution is to use a utility (cURL here) that is present in Linux. Example config:
user@host# show system archival configuration { transfer-on-commit; archive-sites { " ftp://user:host@sgrpca://var/tmp/" password "$9$rtneWX7NbY4J-VJUi.zFu0B"; ## SECRET-DATA } }
-
After a configuration change, the
configd
holds on to the shared pointer in DDS preventing complete cleanup of the deleted Junos OS Evolved object. There is no functional impact.PR1641960