Resolved Issues: 21.2R3

The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed. PR1604123

The flowd process generates core file if the SIP ALG is enabled and a specific Session Initiation Protocol (SIP) packet is received. PR1615438

Transit packets from local to remote VTEP might get punted to CPU and cause DDoS events. PR1489233

In a Junos Fusion deployment, dynamically removing and adding a logical interface under interface-set could lead to traffic control profile on the interface-set error. PR1593058

The fabric queues priority might not get changed after activate/deactivate CoS configuration. PR1613541

Baseline EVPN-VXLAN Transition from IPV4 to IPV6 or vice verse does not work in certain sequence. PR1552498

The BUM traffic might be dropped after changing any configuration on the device without router-id configured. PR1576943

Transit Traffic gets dropped post disabling one of the PE-CE link on a remote Multi-Home PE in EVPN-MPLS A-A setup with Dynamic-List NextHop configured. PR1594326

Bridge mac-table learning entries might not be as expected for the EVPN-MPLS routing instance. PR1600310

Few ARP/ND/MAC entries for Vlans are missing with MAC-VRF configuration. PR1609322

Missing MAC address entries in EVPN mac-table despite the presence of the corresponding Type 2 route. PR1611618

The l2ald crash might be seen after performing restart routing on EVPN PE. PR1629426

Removing the es-label-oldstyle statement does not take effect if it is the only knob configured under the protocol EVPN. PR1629953

The rpd might crash when moving an interface from VPLS to EVPN-VPWS instance. PR1632364

The traffic loss might be seen when the link goes down for the local ESI. PR1632723

Unable to execute /usr/sbin/picinfo: dad file descriptor while issuing the clear services inline-monitoring statistics command. PR1624094

The IPv6 filter for family bridge cannot be referenced onto IFL. PR1598530

Delay in getting the response for the clear interfaces statistics all command with scale configuration. PR1605544

Commit is allowed even if firewall filter is not applied to the FPC. PR1618231

The FPC might crash when interface participating in the next-interface filter action flaps. PR1622585

The sensord: Error updating RRD file: /var/run/sensord.rrd error message might be generated on the WRL9 based line card. PR1420927

During flooding, MAC is learnt only on normal access port but not on the aggregated Ethernet interface trunk port. PR1506403

Next-hops are not programmed correctly after VC global switchover. PR1518467

Junos 'et-' interface stuck and remains down between two particular ports. PR1535078

The process grpcd might crash if flapping routes or interfaces. PR1565255

MAC addresses might not be relearned successfully after MAC address age timeout. PR1567723

When using log templates (introduced in 21.1R1) with Unified Policies, logs were not generated in a predictable manner. A new construct has been added that allows you to define a default log profile (set security log profile name default-profile) that can be used to improve this behaviour when multiple log profiles are defined. PR1570105

Interfaces might fail to come up on MX240, MX480 and MX960 platforms. PR1571274

Packets with the MAC address of eth0 and macvlan0@eth0 interface might be sent out to the management interface on VMHOST platform with specific NG-RE. PR1571753

The pkid process might occur during local certificate enrollment. PR1573892

The chassisd process might crash on all Junos platforms that support Virtual Chassis. PR1574669

The CHASSISD_FRU_IPC_WRITE_ERROR: fru_send_msg: FRU GNF 2, errno 40 error message might get generated periodically in the chassisd logs. PR1576173

MIC specific alarms might not be cleared after MIC reboot. PR1576370

The line cards might fail after hitting the I2C error on MX FPC. PR1583060

A high rate of small packets could cause CPU hogging and firmware crash in MPC5E and MPC6E cards. PR1587551

PEM capacity shows incorrectly on MX10003 platform. PR1587694

NAT EIM mapping is getting created even for out to in FTP ALG child sessions. PR1587849

Fabric link training could be seen if fabric self ping silently discards traffic. PR1590054

Some IFLs might go down under logical tunnel due to the limited number of mac addresses in a pool. PR1591853

The DCI InterVNI and IntraVNI traffic might black-holed in gateway node due to the tagged underlay interfaces. PR1596462

The l2alm fails to send IPC message to the l2ald which may cause the FPC to crash. PR1596615

EVPN-VXLAN shared tunnel knobs need to be removed. PR1598142

The mspmand daemon memory leak might be observed after the HA master goes down. PR1598356

The l2ald process might crash due to memory leak when all active interfaces in a VLAN are unstable. PR1599094

Traffic might get silently discarded upon link flap after a topology change. PR1599215

The gNMI Telemetry might stop working after the Routing Engine switchovers. PR1600412

Ipv6 link local BFD session might not come up if we dont have child link of an ae mapped to pfe inst 0. PR1602493

Jflow-syslog for CGNAT might use 0x0000 in IPV4 Identification field for all fragments. PR1602528

When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks. PR1603199

core-usf-qnc-a-fpc3.pic1-flowd_spc3.elf.0.tgz is seeing while Verifying TCP based logging functionality with GRES with AMS-Nexthop style. PR1603466

Traffic loss might occur on the device due to the continuous errors happening on Fabric Healing process (FHP) phase-1. PR1603499

VRRP and BFD might flap on IRB interface on MPC10/11 line cards. PR1604150

NPC logs seen when vrf localisation is enabled. PR1604304

Traceroute status is unhelpful sometimes. PR1604317

GRE tunnel might flap when hierarchical-scheduling configured. PR1605189

The interface on MCP3-NG HQoS/MPC7E flaps continuously after enabling LACP on AE interface. PR1605446

VM host platforms might boot exactly 30 minutes after executing the request vmhost halt command. PR1605971

5G-CUPS:bbe-cups-5G-setup:wf-eabu-dev.tadcaster:re1 {version} vmcore.0.gz. PR1606146

Observing continuous SNMP trap for "Over Temperature!" for all the Renault_Daniel line cards. PR1606555

Random IP assignment might be done on MX platforms configured with PCP and DS-Lite. PR1606687

'WO-0: OGE0 dequeue watermark hit' might be seen with L2 related configuration and receiving jumbo-frame packets. PR1606967

New subscribers might not connect due to the CR-Features service object missing on FPC. PR1607056

IPv6 link-local BFD session might not come up on MX platforms. PR1607077

TCP traffic might be dropped on source port range 512 to 767 when the FlowSpec IPv6 filter is configured. PR1607185

The speed auto-negotiated SFP-T transceiver might not be joined to the AE after performing dcd restart or RE switchover on MX104. PR1607734

The FPC might crash when the option 'sensor-based-stats' is configured. PR1608871

On MX204 platform cannot successfully upgrade to Junos OS Release 21.2R2 image. PR1609377

BFD over GRE tunnel interface stuck in "init" state with GRES enabled. PR1609630

DHCP subscribers over PWHT might be dropped upon GRES after the system reboot. PR1609818

On MX204 device, interface flaps might be observed on certain ports. PR1609988

Traffic loss might be observed if dot1X is configured with 'supplicant multiple' and authenticated user from radius is in single supplicant mode. PR1610746

MACsec session might be dropped due to one way congestion. PR1611091

Erratic behaviour might be seen on platforms using MPC line cards after ISSU is performed. PR1611165

Inter-vlan connectivity might be lost in an EVPN-VXLAN with CRB topology. PR1611488

Duplicate value of add path IDs observed when the telemetry export is done for routes under BGP or for ext-attributes under BGP. PR1612067

The routing protocol engine CPU is getting stuck at 100 percentage. PR1612387

The B4 client traffic will be dropped on MX-SPC3 based AFTR in DS-Lite with EIM activated CGNAT scenario. PR1612555

Some of the fabric links might go into faulty state after swapping FPC LC1201 with LC1202. PR1612624

Memory might be exhausted when both the BGP rib-sharding and the BGP ORR (Optimal Route Reflection) enabled. PR1613104

Traffic loss might be observed due to the shaping rate be adjusted incorrectly in a subscriber environment on MX platforms. PR1613126

Enhanced-hash-key might not take effect when configured with forwarding-options. PR1613142

IGP routing updates might be delayed to program in PFE after interface flaps in a scaled BGP routes environment. PR1613160

For PS Service IFL configured in MPC2-NG/MPC3-NG interface stats do not show correct (shaped) value when shaping is applied. PR1613395

Enabling security-metadata-streaming DNS policy may cause a dataplane memory leak. PR1613489

The process rpd might crash in BGP rib-sharding scenario. PR1613723

Any irrelevant configuration changes may trigger NAT routes flap on MX in USF mode. PR1614688

MPC6E 3D did not comes back up after MIC offline online test. PR1614816

Modifying the input service-filter via COA might fail in subscriber management environment. PR1614903

Line-cards might be unstable due to the continuous growing memory usage of evo-cda-bt app. PR1614952

Export memory and temperature metrics for all existing components when it subscribes to telemetry sensor. PR1615045

The l2ald process might crash in EVPN scenario. PR1615269

Traffic drop might occur when huge number of EIM mappings are created/deleted continuously. PR1615332

Request to provide an api which gives list of potential policy given a session id. PR1615355

rasdaemon processes memory leak -- triggered by hardware memory errors on VMHost platforms. PR1615488

Slow memory leak (32 bytes each time) of rpd might be seen. PR1616065

The show subscribers accounting-statistics and show services l2tp session interface asi0.xx statistics commands might not work on LNS with asi- interfaces. PR1616454

The dual Routing Engine system might not be GRES ready after backup RE reboot in a subscriber management environment. PR1616611

ICMP error packet does not have relevant header when configured with DSLite and with appropriate ICMP ALG name and one UDP application name. PR1616633

L2 cpd memory leak might lead to l2cpd process crash. PR1617151

MPC8E in 1.6T bandwidth mode may not work correctly. PR1617469

The l2cpd core is seen with FIP snooping configuration on any interface. PR1617632

Traceroute packets might get dropped in SFW service-set when other service-sets with asymmetric traffic processing are also enabled on the same MS-MIC/MS-MPC. PR1617830

GMC clock class is seen transmitted for an additional 16 seconds after the PTP source switches from one line card to another. PR1618344

The traffic loss might be seen after cleaning the large-scaled NAT sessions in MS-SPC3 based Next Gen Services Inter-Chassis Stateful High Availability scenario. PR1618360

A device which is configured IP interface(ip-x/x/x) cannot sent out encapsulated IPv4-over-IPv6 packets to a remote device in case of transit packets. PR1618391

The clksyncd might crash and PTP/SyncE might not work. PR1618929

Support whole (atomic) updates at CNHG level. PR1619011

The nsd might crash while validating NAT translation on MX platforms with SPC3. PR1619216

Traffic might be dropped when RSVP is configured with mtu-signaling. PR1619510

Additional commit warnings and errors were introduced to improve security log profile usability. PR1619694

The bbe subscriber access services might be stuck during rebooting the one redundancy line-card of RLT. PR1620227

On MX480 device, observed Output drop packet while verifying Services PCEF subscribers. PR1620421

OAM CFM session does not come Up if ERPS configured and CFM control traffic uses the same VLAN as ERPS control traffic. PR1620536

High wired memory utilization might be observed if GRES is enabled. PR1620599

EVPN type 5 routes might not be installed. PR1620808

Static-subscribers session might get stuck in initializing state after ungraceful routing engine switchover. PR1620827

IFLSet COS hierarchy might be missed in the backup leg after rebooting FPC. PR1621164

Flapping of all ports in the same PFE may cause PFE to be disabled. PR1621286

Commit failure while applying tunnel interface configs using openconfig CLI. PR1621369

Traffic loss can be seen on the new master RE post GRES. PR1621696

FPC crash when macsec interfaces configured with bounded delay feature is deleted. PR1621868

When PHY-Sync state moved to False it internally disables the PHY-timestamping of PTP packets. PR1622108

Invocation of netconf get command will fail if there are no L2 interfaces in the system. PR1622496

[G.8275.1]: High phase jump spikes of ~4000 to 5000 ns is observed during slave clock fail-over within same line card, due to config commit. PR1622575

Constant increase of PCS errors may be seen on channelized port. PR1622741

Port speed might show as 100G even though chassis configuration is set for 40G manually. PR1623237

chassisd memory leak may be seen after adding or removing an interface configuration. PR1623273

The aggregated Ethernet member link might not be correctly populated on the PFE after FPC restart on MX series platforms. PR1624772

On single IPSec tunnel with PMI when sending internet traffic packet processing might get delayed due to session management issue. PR1624974

Specific packets over VXLAN cause FPC reset. PR1625292

The flowd process lost heartbeat for 45 consecutive seconds without alarm raised. PR1625579

The bbe-statsd crash might be seen in the LTS subscriber scenario. PR1625648

gNMI set RPC might fail when multiple values within a single gNMI SetRequest are used for the Junos telemetry interface. PR1625806

Packet loops in the pic even after stopping the traffic on MX platform with SPC3 line card. PR1625888

The bbe-smgd might crash on backup RE after ISSU/GRES. PR1626091

Some Interfaces might not come online after linecard reboot. PR1626130

Implement the show task scheduler-slip-history command to display no of scheduler slips and last 64 slip details. PR1626148

The chassisd might crash on MX104. PR1626486

The autoconf might not work if the DHCPv4 Discover message has option 80 (rapid commit) ahead of option 82. PR1626558

Broadcast traffic might not be forwarded to LT interface in VPLS routing instance after LT interface is deleted then added back. PR1626714

The line card might crash and reload if the EVPN MAC entry is not deleted correctly. PR1627617

Memory leak may occur on PFED process when the flat-file-profile is configured with knob 'use-fc-ingress-stats'. PR1628139

EAPol packets over l2circuit may get dropped at the tunnel start. PR1628196

Tunnel-service bandwidth should not be changed when there are active subscribers. PR1628628

The l2ald might be stuck in "issu state" when ISSU is aborted. PR1629678

Multiple link flaps and traffic might be lost on the links. PR1630006

The kmd daemon might crash with core every few minutes on MX platforms. PR1630070

LLDP packets may be sent with incorrect source MAC for RETH/LAG child members. PR1630886

The kmd might crash since the pkid requested memory leak happens on M/MX platforms. PR1631443

ipv6 host route prefix match disappear from 'forwarding-table' after a ping test, ping continues to work, forwarding table entry is not shown. No impact in traffic. PR1631607

DHCP ALQ Syslog error bbesmgd[26939]: LIBSDB_RSMON_PS_TABLE_PTR_FAILURE: sdb_get_ps_interface_table_record:2076 failed to get the ps_table_header ptr. PR1631858

[CCL Google BX] RPD core on RE1 @ krt_inh.c,krt_nexthop.c,krt_remnant.c. PR1631871

When deleting the VNI and there is another vlan-id-list with a different VNI might cause traffic loss. PR1632444

The bbe-smgd process might crash after removing and adding a child link from the aggregated Ethernet interface. PR1633392

Slow chassis memory leak may occur when chassisd related configuration change is committed. PR1634164

PTP clock class might incorrectly be downgraded to 248 when PTP is enabled on Linecard/MIC which does not support phy-timestamping. PR1634569

CFM CCM PDU is not forwarded transparently on core MX if the ifd is configured under protocols oam. PR1635293

Data might not be exchanged via EVPN-VxLAN domain. PR1635347

Delay might be observed for the interfaces to come up after reboot/transceiver replacement. PR1638045

Locally switched traffic might be dropped on ACX5448 with ESI configured. PR1638386

On MX480 devices, PFED CPU increased post ISSU and remains around 65 to 75 percentage for 32,000 Layer 2 VPN sBNG services. PR1643077

On MX104 devices, the request chassis afeb restart command returns timeout error. PR1645322

Memory usage continuously increase is observed on backup chassis if subscriber service is enabled. PR1595238

Commit related to dynamic profile configuration changes might fail upon executing the request vmhost reboot routing-engine both command. PR1607494

DHCP subscribers might not be synchronized to backup BNG when DHCP ALQ is configured without topology-discover. PR1620544

Memory leaking might occur on the backup Routing Engine when ksyncd is in inconsistent state and had encountered an initialization error. PR1601960

When MTU is configured on an interface a rare ifstate timing issue could occur at a later point resulting in ksyncd process crash on the backup Routing Engine. PR1606779

Duplicate source and destination pair check is done only across same tunnel encapsulation type for FTI. PR1599266

On MX960 device, DAEMON-5: lo0 family maximum labels is non-adjustable in syslog messages. PR1611098

Commit check failure may happen if similar interfaces are configured under VRRP group. PR1617020

Delay in application of CLI configuration by DCD when ae interface members are configured via JET API. PR1621482

The subscribers might be deleted when the host-prefix-only statement is configured on the underlying-interface in GRES scenario. PR1630229

The syslog messages and the dcd crash might occur. PR1633339

VRRP route tracking for routes in VRF might not work if "chained-composite-next-hop ingress l3vpn" is used. PR1635351

Some daemons might get stuck when snmpd is at 100% CPU utilization. PR1636093

FPC might crash if the continuity-check interval under CFM is modified. PR1636226

"show vrrp extensive" doesn't show the next IFL "Interface VRRP PDU statistics". PR1637735

The ae interface with 400GE gets flapped on adding/removing a 400GE member link. PR1641585

The vrrpd core might be observed after interface state change. PR1646480

GRPC connections stuck on ESTABLISHED with no active collector. PR1592542

Configuring port mirroring firewall filter in a bridge domain with IRB might cause traffic loss over IRB. PR1607750

Making configuration changes with apply-group add/delete associated with DHCP may result in client connection failur. e PR1550628

The jdhcpd process might crash under certain conditions. PR1603992

DHCP leasequery is failing to restore binding when the reply is received over irb interface. PR1611111

BFD hold-down timer doesn't work properly when LAG is configured. PR1616764

Enabling DHCP on Junos and Junos Evo platforms might cause the router's file system storage to get filled up with log files. PR1617695

The jdhcpd crashes upon receiving a specific DHCP packet. PR1618977

Circuit-id handled incorrectly with backup node for ALQ with Topology discover configured. PR1620461

The jdhcpd process crashes in DHCP/DHCPv6 environment. PR1625011

The process jdhcpd may stuck at 100% post clients login/logout. PR1625112

Option 82 might not be attached on DHCP request packets. PR1625604

The rpd scheduler might continuously slip after GRES when there are 7000 DHCP clients in a subscriber management environment. PR1625617

Non-DHCPv4 BOOTP protocol packets might not be processed if enhanced subscriber management is enabled. PR1629172

The node SID might be seen in an unresolved state. PR1564169

LDP P2MP traffic may be interrupted post GRES. PR1609559

LDP does not support policy import with rib-groups. PR1611081

The process rpd might crash if express segments using SR-TE underlay are configured. PR1613372

The rpd core dumps might occur for few value configurations of signaling bandwidth on container LSP. PR1614248

Protected LSP goes down with strict hops and link protection configured. PR1616841

LDP protections paths might not be established when the auto-targeted-session command is deactivated and activated. PR1620262

The rpd memory leak might be observed in a subscriber management environment with RSVP. PR1637645

Dynamic bypass LSP might flap at every re-optimization interval. PR1639292

Intermittent p2mp traffic drop might be seen in MVPN scenario. PR1608311

Ephemeral instance configuration not removed even after deleting the ephemeral instance from set system configuration-database. PR1553469

Rtsdbd core might be seen when IPsec configuration is activated and deactivated. PR1610594

Syslog messages may be lost partially in case of lots of messages generated to eventd. PR1612535

After receiving a specific number of crafted packets snmpd will segmentation fault (SIGSEGV) requiring a manual restart. PR1613874

FPC crash might be seen in firewall filter scenario. PR1589619

XMCHIP_CMERROR_PT_INT_REG_PCT_PAR_ERR (0x70296) might be observed on MPC5 card which triggers PFE disable. PR1597953

Traffic through one SPU may stop with potential packet drop issue with alarm as FPC Major Errors raised due to the PIC_CMERROR_TALUS_PKT_LOSS error. PR1600216

On MX platforms vmcore on both the routing engines might be reported due to mbuf corruption. PR1602442

The FPC might crash if 'flow-table-size' is configured on MX platforms. PR1606731

FPC crash might be seen due to mac-move between two interfaces under same bridge domain. PR1607767

Degraded traffic processing performance might be observed in case of processing very high PPS rate traffic. PR1619111

CoS custom classifier might not work on logical interface. PR1619630

Trio-based line cards might crash when PFE memory is hot-banking. PR1626041

Configuration commit may fail while configuring the knob 'authentication-key-chains' under groups. PR1626400

Unrealistic service accounting statistics might be reported due to firewall counter corruption. PR1627908

The gencfg_cfg_msg_gen_handler drop error message might be seen after running commit command. PR1629647

The packet drop might be seen on FPC on Trio based platforms. PR1631313

When route preferred-metric is different for different RPM policies, the same metric is not reflected in routing records. PR1634129

Continuous Fabric Link Sanity Check interrupts in intervals of weeks might cause at some point fabric input block traffic silently discard. PR1636060

The vmxt_lnx core found at topo_get_link jnh_features_get_jnh jnh_stream_attach. PR1638166

BGP import policy is not applied to all the routes when CCNH inet is enabled. PR1596436

Evaluation of inet-vpn route-filters might not work with /32 exact statements for BGP flowspec routes. PR1618726

The rpd process might crash in a corner case in PIM-SM scenarios. PR1574731

The rpd might crash in BGP multipath scenario if interface for a single hop EBGP peer goes down. PR1589141

The process rpd might crash post GRES. PR1590912

Observing commit error while configuring "routing-options rib inet6.0 static" on all Junos platforms. PR1599273

The rpd core might be observed due to memory corruption. PR1599751

Kernel crash might be observed on platforms having BGP configured with family Layer 2 VPN. PR1600599

rpd crash might be seen after deactivating/activating interfaces. PR1605620

The BGP replication may be stuck in InProgress state. PR1606420

Multicast traffic might be duplicated on subscriber interface on MX platforms. PR1607493

The rpd may crash after a commit if there are more than one address in the same address ranges configured under 'bgp allow'. PR1611070

The interface might receive multicast traffic from a multicast group which it is not interested in. PR1612279

Undesired protection path may get selected for some destination prefixes. PR1614683

The memory leak on rpd might be observed after running "show route" cli command. PR1615162

BFD sessions flapping may occur after performing GRES. PR1615503

The wrong BGP path may get selected even when a better/preferred route is available. PR1616595

Traffic drop will be seen when VPN labels are incorrectly allocated due to change in nexthop. PR1617691

Verification of BGP peer count fails after deleting BGP neighbors. PR1618103

The rpd may crash and restart when NSR is enabled. PR1620463

Time delay to export prefixes to BGP neighbors might occur post applying peer-specific BGP export policies. PR1626367

Multipath route with List-NH which has Indirect-NH as members fails into BGP-LU. PR1626756

The contributing routes might not be advertised properly if "from aggregate-contributor" is used. PR1629437

The multicast forwarding cache might not get updated after deactivating the scope-policy configuration. PR1630144

The BGP ECMP might not work and multipath route wont be created. PR1630220

The rpd might crash after clearing isis database. PR1631738

The BGP session might flap after rpd crash with 'switchover-on-routing-crash' and NSR enabled in a highly scaled environment. PR1632132

IS-IS database may not be synchronized in some multiple areas scenario. PR1633858

Multipath route getting formed for a VPN prefix due to incorrect BGP route selection logic. PR1635009

The BFD session might be down when multiple addresses of same subnet are configured. PR1635700

L2TP tunnels may go down and not able to re-establish after restarting the bbe-smgd process. PR1629104

Tunneled subscribers may be stuck in terminating state in L2TP subscriber scenario. PR1630150

DTCP radius-flow-tap fails to program PFE when trigger X-NAS-Port-Id exceeds 48 character length. PR1647179

Prefix duplication errors might occur for DHCPv6 over PPPoE subscribers. PR1609403

Class attribute is corrupted for Radius accounting messages since ISSU to 19.1 or higher release on MX series platforms. PR1624066

Radius CoA (Change of Authorization) NAK may not be sent with the configured Source Address in a virtual-router environment. PR1625858

ESSM sessions may get terminated in Radius as class attribute has got corrupted after performing ISSU. PR1626718

Event-timestamp in radius Acct-Stop may show future time. PR1643316

A low privileged user can elevate their privileges to the ones of the highest privileged J-Web user logged in. PR1593200

The core files can not be deleted using CLI "file delete /var/core/*/vmcore*". PR1624562

Junos upgrade may fail with error "configuration database size limit exceeded". PR1626721

The multicast route is not getting installed after exporting of secondary routes from one instance to another. PR1562056

Wrong st0 IFL deletion at spoke when multiple VPNs negotiate same destination address as TS. PR1601047

The rpd process might crash during ISSU if the auto-sensing knob is enabled for l2circuit. PR1626219