Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

What’s Changed

Learn about what changed in this release for SRX Series.

Junos XML API and Scripting

  • The file copy command supports only text-formatted output in the CLI (ACX Series, EX Series, MX Series, PTX Series, QFX Series, SRX Series, vMX, and vSRX)—The file copy command does not emit output when the operation is successful and supports only text-formatted output when an error occurs. The file copy command does not support using the | display xml filter or the | display json filter to display command output in XML or JSON format in any release. We've removed these options from the CLI.

Software Installation and Upgrade

  • New options for the request system snapshot command (ACX Series, EX Series, MX Series, PTX Series, QFX Series, and SRX Series)—The request system snapshot command includes new options for non-recovery snapshots. You can include the name option to specify a user-defined name for the snapshot, and you can include the configuration or no-configuration option to include or exclude configuration files in the snapshot. By default, the snapshot saves the configuration files, which include the contents of the /config and /var directories and certain SSH files.

    [See request system snapshot (Junos OS with Upgraded FreeBSD).]

VPNs

  • Remote-access VPN solution doesn't support hexadecimal pre-shared (SRX Series and vSRX 3.0)—With remote-access VPN solution, for pre-shared-key based authentication method, we support ascii-text format. This means, do not use hexademical format for the pre-shared keys in your configuration for remote-access VPN solution. Therefore, configure the statement ascii-text with ascii text format at [edit security ike policy policy-name pre-shared-key] hierarchy level for use with Juniper Secure Connect.

  • Removal of power mode IPsec Intel QAT option in IPsec VPN (SRX Series)—We have removed the option power-mode-ipsec-qat at [edit security flow] hierarchy level from Junos CLI for display. This option is now hidden as it is not recommended to be configured with multiple IPsec VPN tunnels. We continue to use AES-NI in PMI mode for better performance than QAT.

    [See Improving IPsec Performance with PowerMode IPsec.]

  • PMI Mode Passthrough ESP traffic (SRX Series)—we support the PMI express path processing for passthrough ESP traffic.