What’s Changed
Learn about what changed in this release for MX Series.
Authentication and Access Control
-
SHA-1 password format deprecated (ACX Series, EX Series, MX Series, PTX Series, QFX Series, SRX Series, vMX and vSRX)—We've removed the
sha1
option at the[edit system login password format]
hierarchy level because SHA-1 is no longer supported for plain-text password encryption.
General Routing
-
Modified show ancp subscriber details output fields (MX Series)—As the access loop encapsulation is transport independent it can be either passive optical network (PON) or DSL TLV. Hence, the
show ancp subscriber details
output field should not tag the details as a DSL TLV. Therefore, we've modified the existingDSL Line Data Link
,DSL Line Encapsulation
, andDSL Line Encapsulation Payload
output fields to the following respectively:Access Loop Encapsulation Data Link
Access Loop Encapsulation Encapsulation1
Access Loop Encapsulation Encapsulation2
See [ show ancp subscriber.]
-
Router advertisement module status on backup Routing Engine (MX Series)—The router advertisement module does not function in the backup Routing Engine as the Routing Engine does not send an acknowledgment message after receiving the packets. Starting in this Junos OS Release, you can view the router advertisement module information using the
show ipv6 router-advertisement
operational command. -
Support for DDoS protocol (MX10008)—We've enabled the DDoS protocol support at the
edit system ddos-protection
hierarchy level for MX10008 devices. In earlier releases, the MX10008 devices did not support these DDoS protocol statements.Filter-action
Virtual-chassis
Ttl
Redirect
Re-services
Re-services-v6
Rejectv6
L2pt
Syslog
Vxlan
See [ protocols (DDoS).]
Network Management and Monitoring
-
Changes to the NETCONF
<edit-config>
RPC response (ACX Series, EX Series, MX Series, PTX Series, QFX Series, SRX Series, vMX, and vSRX)—When the<edit-config>
operation returns an error, the NETCONF server does not emit a<load-error-count>
element in the RPC response. In earlier releases, the<edit-config>
RPC response includes the<load-error-count>
element when the operation fails.