Skip to main content

Upgrade from 5.6 to 6.1 may result in missing FIB entries

Upgrade from 5.6.8 to 6.1.7 may result in missing FIB entries and service-paths, causing connectivity issues.

Issue ID: I95-55904
Last Updated: 2024-04-24
Introduced in SSR Version: 6.1.7


The key of the data structure storing service configuration is a net::IpMask, which has custom operator< and operator== operator functions. These operators treat the bits after the prefix length as 1s, so should be equal to (as an example). The container used in 5.6 uses the operator<. The container used in 6.1 takes a hash operator which is not hashing these equivalent net::IpMasks to be equal, hence the difference in behavior.

Release Notes

Fix case where adding services with overlapping address prefixes would cause config to not apply in highway.



The potential impact of a software defect if encountered. Severity levels are:

  • Critical: Could severely affect service, capacity/traffic, and maintenance capabilities. May have a prolonged impact to the entire system.
  • Major: Could seriously affect system operation, maintenance, administration and related tasks.
  • Minor: Would not significantly impair the functioning or affect service.




Resolved In




Functional Area




Juniper may provide a method to temporarily circumvent a problem; workarounds do not exist for all issues.

curl -JLO
chmod +x t128-show-ip-prefix-conflicts.pyz

Command Help

$ ./t128-show-ip-prefix-conflicts.pyz --help
usage: t128-show-ip-prefix-conflicts.pyz [-h] [-c HOST] [-u USER] [-p PASSWORD] [--config-store {running,candidate}] [-r READ_JSON] [--dump-json]

Show overlapping ip prefixes in 128T services

optional arguments:
-h, --help show this help message and exit
-c HOST, --host HOST Conductor/router hostname
-u USER, --user USER Conductor/router username (if no key auth)
-p PASSWORD, --password PASSWORD
Conductor/router password (if no key auth)
--config-store {running,candidate}
Config store to be used (running/candidate)
-r READ_JSON, --read-json READ_JSON
Read services config from json file
--dump-json Write config dump to json file "t128-show-ip-prefix-conflicts.json"


$ ./t128-show-ip-prefix-conflicts.pyz -r ssr-configuration.json
WARNING: Service "zscaler__client.internet" has conflicting addresses:
* and
* and
* and