What’s Changed
Learn about what changed in this release for SRX Series.
Flow-Based and Packet-Based Processing
-
PMI Mode Passthrough ESP traffic: Starting in Junos OS Release 22.1R3, we support the PMI express path processing for passthrough ESP traffic on the SRX Series devices.
Network Management and Monitoring
-
Support for the
junos:cli-featureYANG extension (ACX Series, EX Series, MX Series, PTX Series, QFX Series, SRX Series, vMX, and vSRX)—Thecli-featureYANG extension identifies certain CLI properties associated with some command options and configuration statements. The Junos YANG modules that define the configuration or RPCs include thecli-featureextension statement, where appropriate, in schemas emitted with extensions. This extension is beneficial when a client consumes YANG data models, but for certain workflows, the client needs to generate CLI-based tools.
Software Installation and Upgrade
-
New options for the
request system snapshotcommand (ACX Series, EX Series, MX Series, PTX Series, QFX Series, and SRX Series)—Therequest system snapshotcommand includes new options for non-recovery snapshots. You can include thenameoption to specify a user-defined name for the snapshot, and you can include theconfigurationorno-configurationoption to include or exclude configuration files in the snapshot. By default, the snapshot saves the configuration files, which include the contents of the /config and /var directories and certain SSH files.[See request system snapshot (Junos OS with Upgraded FreeBSD).]
User Interface and Configuration
-
The
file copycommand supports only text-formatted output in the CLI (ACX Series, EX Series, MX Series, PTX Series, QFX Series, SRX Series, vMX, and vSRX)—Thefile copycommand does not emit output when the operation is successful and supports only text-formatted output when an error occurs. Thefile copycommand does not support using the| display xmlfilter or the| display jsonfilter to display command output in XML or JSON format in any release. We've removed these options from the CLI.
VPNs
-
Removal of power mode IPsec Intel QAT option in IPsec VPN (SRX Series)—We have removed the option
power-mode-ipsec-qatat [edit security flow] hierarchy level from Junos CLI for display. This option is now hidden as it is not recommended to be configured with multiple IPsec VPN tunnels. We continue to use AES-NI in PMI mode for better performance than QAT.