Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

What's Changed

Learn about what changed in this release for QFX Series switches.

General Routing

  • Changes to default behavior under forwarding-table— ecmp-fast-reroute and indirect-next-hop-change-acknowledgements are enabled by default under the edit routing-options forwarding-table hierarchy. You can verify these defaults by running the show configuration routing-options forwarding-table in operational mode.

    [See ecmp-fast-reroute and indirect-next-hop-change-acknowledgements.]

  • Changes to show system alarms command output (QFX5130 and QFX5220)—When the current version of the firmware is less than the minimum supported version, you can now see alarms for this mismatch in the output of the command. These alarms were not shown previously. For example, when you have a firmware version mismatch, you should now see output similar to the following:

  • On QFX5230 and QFX5240 devices, ECN counters at the port level did not properly account for ECN marked packets due to local congestion. This led to port-level ECN counters showing different numbers than the sum of queue-level ECN counters. This has been fixed starting in Junos OS Evolved 25.1R1.

  • Support added for source and destination port optimization for port ranges for IPv6 input firewall filters.

  • Deprecation of jnxLEDTable—The jnxLEDTable table is no longer supported.

  • The show subscribers extensive client-type dhcp | display xml validate command has now been updated to display correct output instead of Duplicate data element error.

  • SFP Optics LOS alarms— SFP Optics don't support Tx laser disabled alarm, Tx loss of signal functionality alarm, and Rx loss of signal alarm as diagnostics output.

    See show interfaces diagnostics optics.

  • Change in CLI output—The CLI output for show system license bandwidth, show system license bandwidth fpc, and show system license fpc commands is updated.

    See Monitor Junos Licenses.]

  • Deprecated license trace (Junos OS Evolved)—We've deprecated the CLI option show system license liblicense-trace.

Class of Service (CoS)

  • In Junos OS Evolved, do not associate a default forwarding class name with a different queue number. Use a custom forwarding class name instead. Defining customer forwarding classes with factory default forwarding class names causes errors.

EVPN

  • Easy EVPN LAG (EZ-LAG) feature lightweight loop detection configuration change— We have updated the configuration generated by the easy EZ-LAG features commit script to use logical interface names for the lightweight leaf to server loop detection feature. The EZ-LAG commit script previously generated the loop detection configuration with physical interface names, but the loop detection feature works only for logical interfaces. The lightweight loop detection configuration uses the loop-detect statement at the edit protocols hierarchy level.

    [See Easy EVPN LAG (EZ-LAG) Configuration.]

  • Duplicate MAC detection timeout (QFX5000 Series switches)—The default setting for auto-recovery-time is 5 minutes on these platforms only.

    [See duplicate-mac-detection.]

Interfaces and Chassis

  • FEC statistics display (QFX5700)—The show interfaces interface-name extensive command displays the FEC statistics on the host side because of the PHY introduction. This CLI display change is applicable to all PHY platforms.

Routing Protocols

  • Extension of traceoptions support for VLANs in IGMP/MLD snooping— The traceoptions option is supported under the edit routing-instance protocols igmp-snooping vlan and edit routing-instance protocols mld-snooping vlan hierarchy. traceoptions can be enabled for both specific and all vlans.

    See vlan (IGMP Snooping) and vlan (MLD Snooping).]

Junos XML API and Scripting

  • Refreshing scripts from an HTTPS server requires a certificate (ACX Series, PTX Series, and QFX Series)—When you refresh a local commit, event, op, SNMP, or Juniper Extension Toolkit (JET) script from an HTTPS server, you must specify the certificate (Root CA or self-signed) that the device uses to validate the server's certificate, thus ensuring that the server is authentic. In earlier releases, when you refresh scripts from an HTTPS server, the device does not perform certificate validation. Before you refresh a script using the set refresh or set refresh-from configuration mode command, first configure the cert-file statement under the hierarchy level where you configure the script. The certificate must be in Privacy-Enhanced Mail (PEM) format.

    [See cert-file.]

User Interface and Configuration

  • Access privileges for request support information command (ACX Series, PTX Series, and QFX Series)— The request support information command is designed to generate system information for troubleshooting and debugging purposes. Users with the specific access privileges maintenance, view, and view-configuration can execute request support information command.

  • Changes to the show system storage command output (ACX Series, PTX Series, and QFX Series)—We've updated the show system storage command output to include only true (physical) storage and exclude any host/hypervisor level storage. In earlier releases, the output also includes a container/jail storage which does not have a separate storage of its own.

    [See show system storage.]

  • Option to view combined disk space usage statistics for all configuration databases (ACX Series, PTX Series, and QFX Series)—The show system configuration database usage command provides the merge option. When you include the merge option, the command output displays combined disk space usage statistics for all configuration databases, including the static configuration database and all ephemeral configuration database instances.

    [See show system configuration database usage.]