Known Limitations
Learn about known limitations in this release for SRX Series devices.
For the most complete and latest information about known Junos OS defects, use the Juniper Networks online Junos Problem Report Search application.
High Availability
-
In Multinode High Availability for vSRX instances in VMWare ESXi environment, configuration of virtual MAC address is not supported in the following statement:
[set chassis high-availability services-redundancy-group <number> virtual-ip <id> use-virtual-mac
Chassis Cluster
-
On SRX Series devices, when you install
junos-ikepackage and configure VPN, the ISSU upgrade from any Junos OS Release prior to 22.4R1 to the Junos OS release 22.4R1 or later is not supported. As a workaround, you can perform the following:-
Use the minimal downtime procedure to upgrade. See https://supportportal.juniper.net/s/article/SRX-How-to-upgrade-an-SRX-cluster-with-minimal-down-time?language=en_US
-
Deactivate the
security ikeand VPN configuration before proceeding with ISSU.
-
Network Address Translation (NAT)
-
While port ranges are configured as part of NAT source pool, port affinity allocation might fail as when the affinity allocation is failed for a flow then the port random allocation is set. The random allocation can allocate any port and the allocation failure can grow.PR1678563