What’s Changed in Release 21.4R3

New ARP and NDP packet classification (QFX10002, QFX10008, and QFX10016)—We've introduced two CP classes for ARP and NDP packets received over VTEP interface. When your device identifies a packet as ARP or NDP, it performs an ingress port check which verifies whether the VTEP interface receives these packets. If VTEP interface receives the packet, datapath re-writes the CP class to the newly defined values. Based on this new CP class, the system performs the remaining packet processing and forwards the packets toward the host path. The system adds a separate DDoS policer to this ARP traffic, which ensures that the ARP traffic is not triggering underlay ARP DDoS violation.

Change in in unnumbered-address support for GRE tunnel—Starting in Junos OS Release 24.4R1, there is a behavioural change in unnumbered-address support for GRE tunnel with IPV6 family and display donor interface for both IPV4 and IPV6 families of GRE tunnel. You can view interface donor details under show interfaces hierarchy level.

[See show interfaces.]

sFlow configuration— sFlow configuration is allowed only on et, xe, and ge interfaces in Junos OS Evolved-based platforms. All other interfaces are blocked for configuring sFlow on Junos OS Evolved-based platforms. A CLI error will be thrown if sFlow is configured on any other interface other than et, xe or ge interface.

Display the donor details of the IPv6 borrower interface—The output for the show interfaces command now displays the donor details of the IPv6 borrower interface.

[See show interfaces].

Starting with Junos OS and Junos Evolved release 21.4R3 a CSPF LSP uses a new instance ID when attempting to re-signal a down LSP.

The MPLS EXP bits transmitted in self ping messages are set based on the DSCP/ToS setting of the corresponding IP packet.

Changes to the NETCONF <edit-config> RPC response (ACX Series, PTX Series, and QFX Series)—When the <edit-config> operation returns an error, the NETCONF server does not emit a <load-error-count> element in the RPC response. In earlier releases, the <edit-config> RPC response includes the <load-error-count> element when the operation fails.

OpenConfig container names for Point-to-Multipoint per interface ingress and egress sensors are modified for consistency from "signalling" to "signaling".

When the krt-nexthop-ack statement is configured, the RPD waits for the next hop to get acknowledged by PFE before using it for a route. Currently, only BGP-labeled routes and RSVP routes support this statement. All other routes ignore this statement.

A new field rollback pending is added to the output of show system commit that identifies whether commit confirmed is issued. It is removed once commit or commit check is issued or commit confirmed is rolled back after rollback timeout.