ON THIS PAGE
Resolved Issues
Learn about the issues fixed in this release for MX Series routers.
For the most complete and latest information about known Junos OS defects, use the Juniper Networks online Junos Problem Report Search application.
Authentication and Access Control
-
Radius authentication is failing when Challenge Token is entered PR1862203
Class of Service (CoS)
-
When CoS configurations for an Interface Device (IFD) are present both under the wildcard (applied via groups) and as specific configurations (applied directly under the class-of-service hierarchy) on Junos platform, the Interface Device (IFD) correctly takes the specific configurations as expected. However, the Interface Logical (IFL) over this IFD does not take the wildcard configuration from the group. PR1872595
EVPN
-
Stale MAC entries may remain in the MAC table of EVPN routing instances after rapid MAC-IP move scenarios PR1833660
-
RPD core-dump on 22.2R3-S4. PR1841965
-
Few seconds traffic loss during previous DF coming back with EVPN-VPWS non-revertive DF preference feature enabled. PR1851659
-
Using SRv6 or MPLS IPv6 encapsulation over EVPN instances causes IPv4 packets to be dropped PR1857154
-
NTP DF election feature should support EVPN VPWS instances. PR1860135
-
'TLV type 00000052 not supported on IFL gr' seen repeatedly in syslog for EVPN routing-instance configured with gr- ifls. PR1870365
Forwarding and Sampling
-
Error messages are observed and incorrect values are returned for SNMP requests for pfe traffic statistics PR1692411
-
Incorrect color-aware srTCM marking with yellow packet loss priority. PR1837840
-
MIB2D will see 100% CPU utilization due to MIB2D walk fail PR1856854
-
MIB2D stucked at 100% on MX10003 PR1859894
-
System becomes unresponsive or crash due to frequent filter changes in a scale scenario having mib2d process in use PR1872347
General Routing
-
Junos OS: An unauthenticated attacker with local access to the device can create a backdoor with root privileges (CVE-2023-44194) PR1514925
-
Multiple J-UKERN core files might be generated during the sanity test PR1641517
-
Extremely fast interface flaps in MPC10E line-card causes cpu to hog which leads to fpc reboot. PR1727066
-
Error message may occurs once in a while with full scale when 'clear bgp neighbor all' with all the services like EVPN, vrf etc being present. PR1744815
-
MPC10E: Support of G.8275.1 PTP Hybrid mode with speed 400G PR1767930
-
[./sw-vale-mx-indus] [generic] MX10004 :: LC480 line card crashed with reference to posix_interface_abort () at ../src/pfe/platform/linux/posix_interface.c:2729 PR1784824
-
Speed change between 1G and 10G with traffic in high-priority queue on ports causes the link to go down PR1807277
-
FPC crash due to race condition on MX platforms with LC480. PR1809644
-
Tunnel source and destination in the same broadcast domain lead to traffic drops. PR1811488
-
Complete packet loss will be observed for the inter-VLAN traffic in EVPN-VXLAN CRB scenario PR1820830
-
Random ports of EX4400 will not be created on upgrade or reboot PR1825281
-
In high-scale, high-load environments, the l2ald process may experience hangs during Apstra polling. PR1828741
-
Commit error check-out failed does not get triggered when a complete bridge-domain is configured in instance-type vrf. PR1829886
-
High FPC CPU utilisation and local MAC learning failure in EVPN-MPLS scenario due to rapid MAC moves PR1838335
-
The MPC7/MX2K-MPC8E/MX2K-MPC9E line cards of the FPC gets stuck into HOST LOOPBACK WEDGE state post pfe-reset action triggered by any PFE major/fatal errors PR1839071
-
Tactical Traffic Engineered load sharing utilization displays incorrect percentage on MX platforms PR1840503
-
Major alarm "Host 0 bme1 : Ethernet Link to other RE Down" or log "CHASSISD_LINK_RE_ERROR_RECOVER: RE_TO_ORE iface recovery: bme1 is down" is seen when backup RE is removed PR1840810
-
ISSU fail for the MPC2E/3E NG FPC result in FPC crash. PR1841400
-
The "show chassis synchronization extensive" command output shows syncE is locked to both primary and secondary sources after switching between primary and secondary sources PR1841695
-
MGeo Telemetry - Added cluster name and generation number to subsystem health sensor tree. PR1842439
-
Unable to console to VNF using a non-root user from Juniper Device Manager PR1842451
-
Memory leak is detected when interfaces are configured PR1842546
-
Junos OS and Junos OS Evolved: Receipt of a specifically malformed DHCP packet causes jdhcpd process to crash (CVE-2025-30648) PR1842682
-
Incorrect MTU value in the ICMP Next-Hop MTU field, regardless of the actual MTU of the outgoing interfaces PR1842744
-
IGMP packets are not accepted on dynamic demux interface with additional configuration of all interfaces disabled under IGMP protocol. PR1843505
-
Memory leak when deactivating/reactivating routing instances with vrf-table-label PR1843627
-
vlan tagging in Q-in-Q is not handled correctly over EVPN-VxLAN PR1843817
-
Memory leak is seen with rpd task blocks "nhlib_nexthops_004" PR1844160
-
Stale MAC-IP entries are not cleared in an EVPN-VXLAN scenario when encapsulate-inner-vlan or decapsulate-accept-inner-vlan or both knobs are present. PR1844623
-
High heap memory caused MX-SPC3 PIC to go offline. PR1844731
-
Subscribers unable to connect in GNF setup PR1844934
-
Unnecessary trace log files related to licenses are generated. PR1845079
-
Interface not added back to AE bundle with multiple changes in single commit. PR1845370
-
Traffic blackhole is observed for IPv4 /32 LDP prefixes advertised over BGP-LU when BGP sharding is configured PR1845425
-
Incorrect warning message is seen post hyper-mode configuration change and mismatch of hyper-mode between FPC and RE impacts performance. PR1845497
-
Baseline configuration commit takes more time with 256000 MAC configurations PR1845657
-
PTP/SyncE config on Junos fusion port causes crashes PR1846115
-
Continuous logging of alarms during a fiber cut with transport devices PR1846164
-
Memory Leak: Memory leak is detected with rpd task blocks "rpd-trace" PR1846294
-
When "set chassis redundancy failover on-re-to-fpc-stale" is configured unexpected master RE switchover will be seen if backup RE reboots resulting in traffic disruption PR1846557
-
Some ports take longer than others to come back online when multiple ports experience simultaneous flap PR1847378
-
MACSec fails after applying MACSec configuration on IFL and removing it. PR1847418
-
Support FW_Continue with HW Segmented Filters on AFT TRIO platform PR1848740
-
Routing-services enabled on PPPoE dynamic profile causes subscriber login failure for new subscribers. PR1848887
-
Configuring BGP rib-sharding and generate route will cause rpd process to crash. PR1848971
-
Time Error Spikes Observed During SyncE Source Switching Between Line Cards on MX10004 and MX10008 Systems with JNP10K-RE3 RCB and JNP10K-LC480 Modules. PR1849099
-
The SNMP mib walk for lldpConfigManAddrPortsTxEnable fails. PR1849307
-
The bbe-statsd process crash due to malformed PFE packets. 1849377
-
FPC reboot due to memory leak from telemetry sensor installation/uninstallation. PR1849915
-
Handling AE Child Members, VT port properties reset when Access Port is destroyed. PR1849952
-
Telemetry query on /system xpaths does not work on QFX10002-36Q platform. PR1850033
-
Traffic impact on MACsec enabled ports due to key length limit. PR1850387
-
Host unreachable from the router with PPPoE when "routing-service" and "RPF-check" are enabled, and the route is learned via EBGP. PR1850562
-
Packet duplication and flooding issues are seen when vpls bridge domain is configured on an aggregated Ethernet and label-switched interface across multiple line cards. PR1850604
-
When BGP RIB Sharding is enabled, new BGP group/peer added gets stuck at Flags: <Sync InboundConvergencePending> PR1850620
-
Chassis MX304 going offline due to Power-cycle. PR1850857
-
Warning message is logged upon deleting VPLS neighbor PR1851083
-
Erroneous data read from a temperature sensor caused MX304 to reboot. PR1851100
-
EX3400 Dot1x Radius accounting send incorrect value to the server for Acct-Input-Gigawords/ Acct-Output-Gigawords PR1851299
-
Packet drops are observed on rate-limited queues. PR1851317
-
Observing stale entries under "show ptp phy-timestamping-interfaces. PR1851569
-
Next-hop APIs to support LDP stitching cases over BGP routes pointing to list of indirects PR1851629
-
After primary interface is explicitly disabled and then the VMhost is rebooted or clksyncd application is restarted, delay request packets are sent out of primary interface which is down, instead of secondary. PR1851730
-
Intermittent traffic drops are seen due to large memory allocation for unidentified files. PR1851786
-
[evpn_vxlan] [evpn_instance] ACX7100-32C :: JDI-RCT:l2ald core observed "hbt_descendent,hbt_delete ,l2ald_mac_ip_del_node" after loading the ERB Profile configs PR1852019
-
Unintended reboots on QFX5120-48Y and EX4650-48Y platforms with Acbel PSU. PR1852227
-
With rib-sharding enabled, IPFIX exports wrong SrcAS / DstAS fields PR1852278
-
Memory leaks are seen in bbe-statsd process during the subscriber logout phase. PR1852532
-
EVPN/VPLS protocol configuration through CLI is not allowed on device PR1852905
-
On BNG CUPS controller loss of subscriber state is observed when cluster node restarts PR1853279
-
On MX304 and MX platforms with MPC10,MPC11,LC9600 configured with Virtual Private LAN Service (VPLS) observe validation/installation errors logged by Advanced Forwarding Toolkit(AFT) in the PFE software. PR1853607
-
Router flag is not getting set in Neighbor Advertisement message. PR1853868
-
Devices fail to obtain an IP address when DHCP Security Option 82 is enabled PR1854253
-
After the JNU config is deleted and added back jnuadmin's uid changes PR1854326
-
Traffic drops are observed for v4ov6 traffic when next-hop information is not correctly configured on the backup RE during the switchover PR1854355
-
jnud continues to further sync with the MX controller when the schema tar file failed to secure copy from satellite to the controller PR1854356
-
The rpd gets struck with 100% CPU usage after enabling BGP RIB-Sharding PR1854481
-
Slow commits and chassisd cores on backup RE. PR1854658
-
Check for uniqueness of colors across flex-algorithm configurations. PR1855020
-
On some FX platform parity error causes packet drop PR1855459
-
ICMPv6 packets may be dropped instead of being translated using MAP-T <xref PR1855496
-
IPv6 neighbor discovery with DHCP packet getting dropped when no-snoop option is enabled for DHCP Relay. PR1855624
-
License is Missed Post System Reboot PR1855728.
-
IPv4 Frameroutes with prefix length of less than /32 do not get applied. PR1855891
-
During ISSU the repd experiences a process crash in the master RE during the image validation phase. PR1855947
-
WAN Interfaces fail to receive hostbound traffic when OGE interface FIFO overflow error is detected PR1855966
-
Aftd-trio core dump seen while removing subscribers (vbf) on an AFT based line card may result in a crash. PR1856393
-
Input traffic on physical interface increases in the fabric statistics count despite locality bias feature configured. 1857225
-
The chassisd process crash is seen after the device reboot when chassisd stalls after configuration commit. PR1857833
-
Traffic drop is observed after removing the layer-2 policer from the IFL. PR1857934
-
JUNOS_REG:: MX10008: After doing offline fpc, observing major alarms on FPC. PR1858079
-
SPC3 SNMP : occasionally getting 0 value on jnxSpSvcSetIfCpuUtil, jnxSpSvcSetIfPctMemoryUsage andjnxSpSvcSetIfMemoryUsage64. PR1858550
-
IPv6 link cannot be used for around 10 seconds after DAD finishing due to NS delay. PR1858741
-
Route change is not synced after rpd restart due to rib-fib inconsistency PR1858750
-
A momentary drop in traffic is observed when changes are applied on multipath SR-TE LSPs. PR1860334
-
The rpd crash due to overlapping flow route updates in a single transaction PR1860888
-
The authd process crashes when /etc/resolv.conf file is empty. PR1860913
-
In an EVPN with IRB solution underlying NH change can cause packet drops on certain MX/EX platforms. PR1861020
-
IS-IS enabled with BFD sessions go down when MACsec is enabled on IFL. PR1861054
-
[MX] IPv6 Inline Distributed BFD sessions for ISIS fail to establish after applying CoS transmit-rate rate-limit configuration. PR1861238
-
BGP PIC failover is taking longer than expected when IS-IS as an IGP enabled with LFA. PR1861451
-
On srx4700, LACP is not coming up in distributed mode. PR1861483
-
In BBE scenario the rebalancing event happens later than expected due to periodic rebalance interval miscalculation. PR1861619
-
Random interfaces on MX304 remain in down state after an FPC reboot PR1861672
-
FPC will crash in MX10003 during the Master switchover to RE1 or Master set to RE1. PR1863091
-
On all Junos OS Evolved platforms, traffic loss will be seen after switching the LSP from SRTE to L-ISIS. PR1863248
-
MAP-T translation does not work for upstream traffic. PR1863280
-
Link error reported on one PFE(Packet Forwarding Engine) will also report error on other PFE. PR1863674
-
Observing out-of-order packets when the TCP traffic gets passed over AE bundle and tunnelled via MPLSoUDP tunnel. PR1864237
-
Due to race condition the FPC on MX platform crashes. PR1865576
-
Traffic drop from subscriber will be observed when rpf-check knob is enabled under subscriber dynamic-profile with static underlying VLAN interface PR1865649
-
The vms logical interface(s) remains down when inline-jflow is configured in the system PR1866570
-
PPPoE subscriber login failures observed after interface flapping resulting in AC system errors on Junos MX Platforms PR1868007
-
The rpd process crashes and asserts are seen due to memory leak. PR1868085
-
After IPv6 tunnel is up and the iked daemon is restarted, post clearing of the IKE SA, ping from one end to the other end is not working as expected PR1869198
-
Image validation fails during the Junos VM validation. PR1870082
-
Link instability is seen on 4x10GSR and 40G-SR4 SFP modules from Finisar having high Rx output value. PR1870156
-
RPD might crash when upgrading using no-validate. PR1870183
-
Fragmented packets dropped in EVPN-MPLS scenario due to the IRB interface MTU limitation. PR1871420
-
Filter-Based Forwarding (FBF) failed for over unicast IRB over AE on MX and EX platforms. PR1871698
-
High memory and CPU usage due to unintended phone-home client activation. PR1871802
-
The l2ald process crash is observed on non L2NG Junos platforms configured with "native-vlan-id" and "bridge-domains" on an IFL. PR1872280
-
Packet loss or retransmissions observed on MX platforms using SFP-T transceivers PR1872743
-
[MX] "smid ../../../../../../src/junos/lib/libsdb/licsubs/bsd12/liblicense_subs_os.c liblic_subs_total_active_licenses_in_use XXX" logs flood in license_flex_subs_trace.log. PR1873587
-
The SPC3 card resets due to kernel memory exhaustion in MX Series platforms with highly scaled routing tables and Inline Active Flow Monitoring configured PR1873938
-
EX9208: Syslog message 'JINSIGHTD_SENSOR_RESUBSCRIPTION' every 5 sec. PR1873990
-
Transient traffic loss for CE in an EVPN MPLS setup with Multi-Homing. PR1874476
-
JUNOS_REG: MX304 : Inline IKEv2 SA count verification failed, as IKE Security Associations did not come up following the rollback of the IPsec configuration. PR1876271
-
The L2BSA subscriber fails to logout when "auto-configure-trigger" knob is edited on ANCP neighbour of MX platforms PR1877794
Infrastructure
-
Memory leak is observed when Telemetry is configured. PR1865403
Interfaces and Chassis
-
MTU configuration is not applied from the configuration group after commit and "warning" is seen PR1848768
-
Routing instance knob for ICCP backup liveness detection PR1850316
-
The jpppd process will crash with frequent subscribers login/logout PR1854387
-
FPC process crash observed due to heap memory errors with Inline CFM and VLAN Normalisation PR1856132
-
Observing traffic loss on PS service interface after deactivate and activate VPLS/EVPN instance type PR1858289
J-Web
-
Unable to load J-Web after upgrading SRX when time zone is set to GMT+x or GMT-x. PR1851362
Layer 2 Features
-
The snmp mib walk on jnxVplsPwBindTable fails with vpls routing-instances having multiple mesh-groups PR1806424
Layer 2 Ethernet Services
-
DHCP-Relay short cycle protection can get stuck in Grace period PR1835753
-
JDHCPD core @ ce_lease_time_compare GenAVLTreeDelete GenAVLTreeEntryDelete PR1835954
-
DHCPv6 BLQ not working as expected PR1839348
-
DHCPv6 Renew from a dual-stack CPE may be ignored if DHCP server is using DUID type 3 (DUID-LL) and DHCPv6 binding doesn't exist PR1843596
-
AE member not able to discover lost LACP peer connection leading to traffic black-holing. PR1874126
MPLS
-
Missing HELLO object in RSVP Hello messages after RE failovers in the NSR mode PR1792192
-
RSVP authentication check fails if the length of the authentication-key is sixteen characters PR1850130
-
The rpd process crashes due to memory exhaustion. PR1854623
-
The "in-place-lsp-bandwidth-update" functionality does not work as expected. PR1854987
-
Traffic loss will be observed when container-LSP with in-place-lsp-bandwidth-update configured. PR1857867
-
RSVP-TE LSP path is not re-optimised to the path with best IGP metric. PR1859219
-
The rpd with per-priority subscription configuration. PR1864823
-
User traffic dropped after ISIS went down on one side with trapcode observed. PR1864949
Network Address Translation (NAT)
-
The 'UI_CONFIGURATION_ERROR' error message is seen when a NAT rule-set has multiple rules PR1873928
Network Management and Monitoring
-
Native junos modules in hello-message and yang modules in /var/run/db/yangs are not same PR1816904
-
REST API doesn t work with passwords that includes the "%" character. PR1840232
-
TCP session between syslog server and device remains in closed state PR1843602
-
The eventd memory leak on Syslog over TLS with unconfigured PKI certificate PR1845058
-
Unable to run event scripts for events: system_abnormal_shutdown/system_shutdown/system_reboot_event PR1847814
-
The eventd process crash occurs due to flooding of out of memory logs. PR1848106
-
commit confirmed rpc request displays closing tag </commit-results> without opening tag <commit-results> in private mode PR1852868
-
Syslog forwarding intermittently stops post DUT reboot on virtual devices. PR1853209
-
SNMPV3 Engine-ID does not update to MAC address as configured PR1866948
Platform and Infrastructure
-
On SRX300 series DHCP relay stops working and the device generates coredump after upgrading to JunOS 23.4R2-S2.1 PR1843935
-
Traffic drops after link flap on active-active ESI setup with MAC pinning enabled PR1846365
-
The standby router goes into the error state when the switchover is performed. PR1847307
-
SCFD flow variation leads to error messages or process crash PR1848317
-
The self-generated traffic on Junos platforms use the incorrect source IP with ECMP configuration PR1849296
-
VPLS flooding is affected in mesh-group when one of the interfaces goes down PR1849854
-
SCFD incorrectly decodes 802.1q tag as the source IP address for suspicious DHCPv4 flows PR1852259
-
The forward next-hop for multicast is not updated during indirect next-hop change in VPLS PR1853874
-
User root is shown as incorrect after power cycle of the device PR1855393
-
ARP packet drops seen if proxy-arp restricted is configured on an IRB interface. PR1865605
-
An IPv6 neighbor solicitation packet is dropped at the ingress PE router when it is received with more than two VLAN tags. 1874503
-
FTP default mode changed from active to passive on 24.2R2 PR1874525
-
ntp process may restart when issue the "show system ntp threshold" command PR1876690
Routing Policy and Firewall Filters
-
Static route validation fails when using an interface-route leaked with rib-groups using "to rib <routing-instace-name>" as matching condition under rib-groups import-policy PR1849500
Routing Protocols
-
The changes from instance-type DEFAULT_INSTANCE to others and vice versa will not be allowed PR1663776
-
rt_instance memory leak on bulk configuration changes PR1832162
-
BGP_PREFIX_THRESH_EXCEEDED warning message keeps flooding after accepted max prefix limit is reached PR1838490
-
Link State of IS-IS IPv6 adjacency is not updated after FPC is restarted PR1847557
-
The rpd crash on commit when configuring router-advertisement with DNS search label under 3 characters PR1847811
-
Junos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crash (CVE-2025-30652) PR1848929
-
The CPU for the rpd stuck at 100% on Junos platforms PR1848939
-
Memory leak is seen when BGP is activated and deactivated PR1849027
-
BGP route still seen in routing table when route not available PR1849202
-
L3VPN routes are not advertised to peer when BGP sessions with route-target filter flaps PR1849568
-
Memory leak is observed when "graceful-shutdown" is configured PR1857801
-
Incorrect subcode NOTIFICATION is sent when local interface is disabled for which multihop is configured for directly connected peer PR1859020
-
BGP queue deadlock on Junos/Junos OS Evolved/cRPD platforms leading to route advertisement failure and traffic loss PR1860786
-
The "advertise-inactive" configuration does not work as expected when "add-path multipath" is configured and negotiated with the neighbor PR1861799
-
The rpd crash due to memory corruption in PIM/MSDP network PR1863470
-
Valid BGP routes in RIB are displayed with verification state as Invalid PR1865114
-
Too frequent LSP generation is observed on specific SR-LDP stitching scenario PR1865829
-
Longer convergence is seen for a BGP neighbor having validation configured in its import policy PR1875144
-
BGP updates missing graceful-shutdown community after quick sender knob flaps PR1877261
-
rpd crash when changes are applied to as-path with dynamic-db in use PR1877288
Services Applications
-
Traffic was lost on MX platforms following a Routing Engine failover PR1853304
Subscriber Access Management
User Interface and Configuration
-
config rollback fails with commit error: Invalid XML from dfwd PR1829614
-
On Junos OS Evolved platforms, HTTPS download fails when HTTPS URL is present in the configuration 1839955
-
Multiple daemons crash upon ephemeral or static db commits PR1847834
-
cli coredump genarated when the size of buffer area (user input) increased to 1GB PR1854070
-
Unexpected issues such as login failures or disabled interfaces observed following abrupt reboot during commit operation 1861063