Juniper JUNOSE 11.1.1, Release Note

Page 1: ...Published 2010 12 07 Release 11 1 1 Copyright 2010 Juniper Networks Inc JunosE Software for E Series Broadband Services Routers Release Notes...

Page 2: ...TATIVE AGENT AUTHORIZED TO BIND THE CUSTOMER CONSENT TO BE BOUND BY THIS AGREEMENT IF YOU DO NOT OR CANNOT AGREE TO THE TERMS CONTAINED HEREIN THEN A DO NOT DOWNLOAD INSTALL OR USE THE SOFTWARE AND B...

Page 3: ...nty statement that accompanies the Software the Warranty Statement Nothing in this Agreement shall give rise to any obligation to support the Software Support services may be purchased separately Any...

Page 4: ...General Counsel You may obtain a copy of the GPL at http www gnu org licenses gpl html and a copy of the LGPL at http www gnu org licenses lgpl html 15 Miscellaneous This Agreement shall be governed b...

Page 5: ...ols and Resources 3 Opening a Case with JTAC 4 Release Overview 5 Before You Start 5 Release Highlights 6 DHCP 6 IPv6 8 RADIUS 8 Early Field Trial Features 9 DHCP 9 Unsupported Features 10 E120 Router...

Page 6: ...PLS 26 Multicast 27 Packet Mirroring 28 Policy Management 29 PPP 31 PPPoE 31 QoS 31 RADIUS 32 SNMP 33 SRC Software and SDX Software 34 SSH 34 Stateful SRP Switchover High Availability 34 Subscriber In...

Page 7: ...DX Software 48 Stateful SRP Switchover High Availability and IP Tunnels 48 Subscriber Management 48 System 49 TCP 49 Unified ISSU 50 Resolved Known Problems 51 AAA 51 BGP 51 Bridge 51 DHCP 51 DoS 51 E...

Page 8: ...Maximums 78 Tunneling Maximums 80 Subscriber Management Maximums 82 E120 and E320 System Maximums 85 General System Maximums 85 Physical and Logical Density Maximums 86 Link Layer Maximums 88 Routing...

Page 9: ...from Global Configuration mode the new software loads properly Upgrading from Release 5 1 1 or Lower Numbered Releases to Release 6 x x or Higher Numbered Releases Release 5 1 1 or lower numbered rel...

Page 10: ...load the release onto the line modules If you then move any of those line modules to an ERX1440 router that router is able to recognize the line module If you move a compatible line module from an ER...

Page 11: ...an active J Care or JNASC support contract or are covered under warranty and need post sales technical support you can access our tools and resources online or open a case with JTAC z JTAC Policies F...

Page 12: ...by product serial number use our Serial Number Entitlement SNE Tool located at https tools juniper net SerialNumberEntitlementSearch Opening a Case with JTAC You can open a case with JTAC on the Web...

Page 13: ...se Notes in their entirety especially the section Known Problems and Limitations You need the following documentation to fully understand all the features available in Release 11 1 1 z These 11 1 1 Re...

Page 14: ...uting services including routing policies NAT J Flow statistics BFD IPSec digital certificates and IP tunnels JunosE IP Services Configuration Guide Configure IP multicast routing and IPv6 multicast r...

Page 15: ...d to support the inclusion of RADIUS returned DHCP options as part of OFFER and ACK responses Change in existing behavior Existing feature extended as described here In lower numbered releases DHCP Lo...

Page 16: ...on Change in existing behavior Existing feature extended as described here In lower numbered releases IPv6 Neighbor Discovery was supported only on Fast Ethernet Gigabit Ethernet OCx STMx GE FE and OC...

Page 17: ...es with OC12 STM4 I O module OC48 line module with OC48 FRAME APS I O module In the current release this feature is available for early field test purposes only You can configure DHCP external server...

Page 18: ...plink LM provides no benefit because access features such as per subscriber QoS are unavailable on the module Policy Management z External Parent Groups Unsupported on ES2 10G ES2 10G Uplink and ES2 1...

Page 19: ...ode PIM dense sparse mode and PIM source specific multicast z Routing Information Protocol RIP version 2 z Virtual Private LAN Service VPLS z Virtual Router Redundancy Protocol VRRP Multiprotocol Labe...

Page 20: ...re compatibility with JunosE releases see the SRC Release Notes Known Behavior This section briefly describes E Series router behavior and related issues In some cases the behavior differs from non E...

Page 21: ...ero the CLI returns an error indicating the burst size is invalid and it does not create the VC Work around Configure a CBR or a UBR plus PCR to create the circuit with the same parameters depending o...

Page 22: ...e graceful restart to be completed successfully Defect ID 184974 BGP IS IS LDP OSPF RSVP z NAT does not function properly with secondary routing table lookup fallback global or global export mapping o...

Page 23: ...oup Configuration mode controller e1 Global Configuration controller t1 Global Configuration description Interface Configuration Still available in Controller Configuration and VRF Configuration modes...

Page 24: ...ilable in Controller Configuration and Interface Configuration modes local interface loopback remote remote line fdl ansi remote line fdl bellcore remote line inband remote payload fdl ansi Controller...

Page 25: ...er Exec Privileged Exec show ipsec identity show ike policy rule User Exec Privileged Exec show ipsec ike policy rule show ike sa User Exec Privileged Exec show ipsec ike sa show ip dhcp external bind...

Page 26: ...application and the DHCP external server application are configured in the same virtual router using the ip dhcp external server sync command on an unnumbered IP interface does not function as expect...

Page 27: ...his issue by modifying any one of these conditions For example this issue does not exist with any of the following configuration modifications Configure DHCP external server and either DHCP relay or r...

Page 28: ...ximum bandwidth of 2 GB per line module 1 GB maximum at the ingress and 1 GB maximum at the egress Therefore of the maximum 96 possible ports for the module in an ERX1440 chassis that is 8 ports in ea...

Page 29: ...ng JunosE Release 8 1 0 or higher z Do not include a not protocol clause in any classifier control list for policies attached to an interface on an ES2 10G Uplink LM The not protocol functionality is...

Page 30: ...ome inconsistent when a slot is reset because some traffic such as control traffic might be destined for the SRP module and is therefore counted elsewhere z When you upgrade from certain releases to J...

Page 31: ...before the physical interfaces To properly configure the shared interfaces in this event run the generated format 1 script twice z When you issue the show ip forwarding table command for a particular...

Page 32: ...he IP address from the interface and then add the IP address back to the interface Work around When you remove and add back the IP address you must also remove the IS IS configuration from the interfa...

Page 33: ...mpletion of IP reinitialization in JunosE releases owing to consumption of system resources for enhanced functionalities we recommend that you increase the hold timers for the associated protocols run...

Page 34: ...OCx STMx ATM IOA or an OCx STMx POS IOA in the lower E320 or left E120 adapter bay of slot 1 or slot 12 When the spare line module is controlling another slot and you revert back to the primary line m...

Page 35: ...st group with more than 10 219 outgoing interfaces OIFS on the same ES2 10G LM Defect ID 81768 z When you upgrade a router running a release earlier than JunosE Release 8 2 x to JunosE Release 8 2 x o...

Page 36: ...f the parent VR and create and enable IPv6 PIM on the parent VR host1 config virtual router parent host1 parent config ipv6 router pim 2 Enter the VRF Configuration mode to restore PIM settings on the...

Page 37: ...s z In rare cases some policy configurations that use CAM hardware classifiers from releases earlier than Release 7 1 0 can fail because they exceed the total hardware classifier entry size of 128 bit...

Page 38: ...Example 2 In this example three forwarding solution conflicts result in rules being overwritten The filter rule is the last rule configured and is therefore applied host1 config policy list bostTwo ho...

Page 39: ...e then support for the new policy is not checked and the invalid policy is applied to the interface without warning The results of this attachment are not predictable z No logs are created if you use...

Page 40: ...sistently such as setting different values for the shaping rate for the same S VLAN node z When you perform an SNMP walk of the juniQosQueueStatistics MIB a timeout of up to 5 minutes ensues during wh...

Page 41: ...s in full as the value of the snmpTrapOID 0 object in the varbind list of an SNMPv2 formatted trap In the corresponding SNMPv1 formatted trap this OID is broken down into subcomponents that fill the S...

Page 42: ...the performance of other control plane functions is reduced Specifically call setup rates are lower than in previous releases We have ongoing development activities to characterize and improve call se...

Page 43: ...oon as the CLI is available after a stateful SRP switchover the commands can hang until the warm restart is completed Subscriber Interfaces z MAC address validation is not supported on either of the f...

Page 44: ...NVS by deleting rel or cnf files z You cannot delete the ipInterface log after you delete the corresponding IP interface This does not prevent you from adding filters to other interfaces nor does it...

Page 45: ...the restarting router experiences an outage of 103 seconds which is beyond the maximum limit after a unified ISSU from JunosE Release 9 2 0p1 0 to 9 3 0b0 12 This outage does not occur when the same...

Page 46: ...terface as Management Interface FastEthernet 6 0 Defect ID 174271 CLI z When you issue a run show ppp command the CLI changes the configuration level of the command line to Global Configuration mode r...

Page 47: ...an ATM bulk configuration interface stack and dynamic VLAN over Ethernet stack sends a renew message Defect ID 87087 DoS Protection z A Telnet session closes when sending ipLocalBGP protocol traffic...

Page 48: ...vlan bulk config BulkDHCPCnfg1 svlan range 23 23 427 712 host1 config if vlan bulk config BulkCezarCnfg2 svlan range 22 22 101 110 Use fully overlapping ranges rather than partially overlapping range...

Page 49: ...VRRP instance ID is enabled on the router and a delay of another second before the ICR partition that corresponds to the VRRP instance is created sleep 1 ip vrrp vrid enable sleep 1 ip vrrp vrid icr...

Page 50: ...an IP profile is configured Defect ID 176470 z Logical port 20 on the ES2 S3 GE 20 IOA is reserved for the hardware multicast packet replication feature Logical port 20 and the hardware multicast repl...

Page 51: ...network interface Version 2 is the default z The default value for the MLDv2 proxy unsolicited report interval timer should be 1 second rather than 10 seconds the value for v1 Defect ID 46040 z The E...

Page 52: ...onal Defect ID 28526 Work around Configure static RPF routes with native hops when LSPs are autoroute announced to IGPs z When the IPv4 explicit null label appears anywhere other than at the bottom of...

Page 53: ...that module the drop count becomes more than expected This unexpected drop count does not occur when you create the same configuration after you reload the router to the factory default configuration...

Page 54: ...ode with EFA2 based ATM line modules z The CLI erroneously enables you to configure a QoS profile with the ethernet node group command Defect ID 80861 z The dynamic shaping rate calculated by the simp...

Page 55: ...ect ID 184118 RSVP TE z After stateful SRP switchover forwarding of VPN traffic might not resume if the core interface that carries an MPLS base tunnel with LDP over RSVP TE flaps constantly goes up a...

Page 56: ...outer in the OSPF IPv6 backbone area Defect ID 181470 ERX7xx model ERX14xx model or ERX310 router When you use the ping command with the IPv6 address of the helper router in the multicast area as the...

Page 57: ...he no interface ip ipAddress command to remove the dynamic subscriber interfaces Although you can use the dhcp delete binding command to remove the DHCP binding and the dynamic subscriber interfaces t...

Page 58: ...he no exclude subsystem subsystemName command to remove the exclusion for the specified subsystem file If you copied the software release to the router before removing the subsystem file from the excl...

Page 59: ...al pool on E320 Defect ID 90675 BGP z SRP reset type processor exception 0x700 program task bgp Defect ID 90031 Bridge z s2 cagliari bg001 new bridge subint in status NotPresent Defect ID 90096 DHCP z...

Page 60: ...ect ID 86925 Hardware z ERX doesn t update ARP cache when Gratuitous ARP Reply Response is received for an IP which already exist in ERX ARP table Defect ID 88936 z E320 does not discard DHCPv6 Solici...

Page 61: ...emain down Defect ID 90482 L2TP z SRP reset type processor exception 0x68616c74 halt task ip_Ctrl_2 Defect ID 90472 MPLS z MPLS RSVP reoptimize cause SRP memory leak Defect ID 90366 z LDP and OSPF fla...

Page 62: ...pBeDef h line 1869 task msRcvCommit Defect ID 90477 z Service manager qos parameter value when modified by CoA service manager is not cleaned up Defect ID 90559 z lmk1 bras Slot 3 GE HDE reset type pa...

Page 63: ...te change using the ip vrrp track and no ip vrrp track commands The master router also operates as the IP address owner z Tech support encoded string for he srp shell command showLineCardMemoryErrorSt...

Page 64: ...6 1 5 Releases 7 1 2 7 1 3 7 1 4 7 2 x 7 3 x Releases 8 x 9 x 10 x 11 0 x and 11 1 x The Upgrading to JunosE Software Release 6 x x or Higher Numbered Releases from Release 5 1 1 or Lower Numbered Rel...

Page 65: ...with current command confirm If you confirm you want to check the running configuration in manual mode or press any key to continue then manual mode is enabled z In JunosE IP IPv6 and IGP Configuratio...

Page 66: ...continues to be forwarded using the previously learned multicast forwarding state z The Grouping ICR Subscribers Based on S VLAN IDs and Example Configuring ICR Partitions That Group Subscribers by S...

Page 67: ...PE2 CE1 config if ip address 2 2 2 2 255 255 255 255 host1 PE2 CE1 config if ip pim sparse mode host1 PE2 CE1 config if exit host1 PE2 CE1 Step 9 Configure the IP interface Tv in PE2 CE2 as a numbered...

Page 68: ...BFD protocol session are up then the BGP session may flap because the remote BGP speaker cannot detect why the BFD session went down The correct behavior of BGP sessions when you remove the BFD config...

Page 69: ...in map p router name ipv4vr z The following information was erroneously omitted from the Generating UDP Checksums in Packets to L2TP Peers section of Chapter 12 Configuring an L2TP LAC of the JunosE B...

Page 70: ...ld high highFrames none low lowFrames window period Using this syntax you are not required to specify a threshold value or a time period Both the threshold and window keywords are optional when you us...

Page 71: ...value of 120 seconds The correct default value is 140 seconds z The JunosE Command Reference Guide N to Z omits the description of the show memory management protection command beginning with JunosE...

Page 72: ...JunosE 11 1 1 Release Notes 64 Errata Copyright 2010 Juniper Networks Inc...

Page 73: ...and IOAs System Maximums for ERX310 ERX7xx and ERX14xx Section General router values General System Maximums on page 66 Physical layer values Physical and Logical Density Maximums on page 67 Link lay...

Page 74: ...the ERX routers Table 1 General System Maximums Feature ERX310 ERX705 and ERX710 ERX1410 ERX1440 Fabric size 10 Gbps 5 or 10 Gbps 10 Gbps 40 Gbps Chassis per 7 foot rack 14 6 3 3 NTP clients 1000 1000...

Page 75: ...Ethernet Interfaces 3 When you pair the GE HDE line module with the GE 8 I O module on the ERX1440 router you can terminate up to 96 Gigabit Ethernet interfaces Slots 2 and 4 on the ERX1440 router sup...

Page 76: ...2 T3 unchannelized ports per chassis 4xDS3 ATM I O modules 8 16 20 32 48 48 T3 unchannelized ports per chassis CT3 T3 12 I O modules 24 48 60 96 144 144 Logical density per chassis Logical E1s per ch...

Page 77: ...1992 166 per T3 Logical fractional T3s DS3 per COCX F3 line module 12 12 12 12 Logical T1s per cOCx STMx F0 line module 336 84 per OC3 STM1 336 84 per OC3 STM1 336 84 per OC3 STM1 336 84 per OC3 STM1...

Page 78: ...authentication negotiation configured Performance and scalability is unchanged when EAP is not configured 2 The total maximum number of Ethernet subinterfaces that can be active at any one time on an...

Page 79: ...odules 256 256 256 256 Bridged Ethernet interfaces per chassis See Note 1 on page 70 16 000 32 000 32 000 48 000 Bridged Ethernet interfaces per line module OCx STMx DS3 ATM 8192 8192 8192 8192 OC3 ST...

Page 80: ...assignments per chassis 200 200 200 200 Ethernet VRRP VRIDs per line module ASIC 800 800 800 800 Frame Relay virtual circuits per chassis 2000 5000 12 000 12 000 Frame Relay virtual circuits per line...

Page 81: ...tion Guide PPP interfaces per chassis See Note 1 on page 70 16 000 32 000 32 000 48 000 PPP interfaces per line module COCX F3 12 12 12 12 cOCx STMx FO 2000 2000 2000 2000 GE FE 8000 8000 8000 8000 GE...

Page 82: ...parent bridging and VPLS Bridge groups or VPLS instances per chassis 1024 1024 1024 1024 Bridge interfaces per line module in bridge groups or VPLS instances 8000 8000 8000 8000 Bridge interfaces per...

Page 83: ...10 router supports a maximum of 16 000 IP network interfaces For all these models the interfaces can be any combination of dynamic or static 3 These values are subject to limitations on available SRP...

Page 84: ...ths to a destination BGP IS IS MPLS OSPF RIP 16 16 16 16 IPv4 forwarding table entries See Note 1 on page 75 Chassis with only ASIC modules 1 048 576 1 048 576 1 048 576 1 048 576 IP network interface...

Page 85: ...6 000 16 000 32 767 Internal Martini circuits local cross connects per chassis 16 000 16 000 16 000 32 767 Multicast routes IPv4 and IPv6 Forwarding entries S G pairs per chassis See Note 8 on page 75...

Page 86: ...cy assignments For most configurations each classifier entry in a policy consumes one CAM entry However a policy that has only the default classifier consumes no CAM resources Policies that use CAM ha...

Page 87: ...000 16 000 Combined ATM Frame Relay GRE L2TP LNS only MPLS and VLAN interface attachments 8191 8191 8191 8191 Rate limiters Egress per ASIC line module 24 575 24 575 24 575 24 575 Ingress per ASIC lin...

Page 88: ...6 Tunneling Maximums Feature ERX310 ERX705 and ERX710 ERX1410 ERX1440 DVMRP IP in IP tunnels per chassis 4000 4000 4000 4000 DVMRP IP in IP tunnels per line module See Note 1 on page 80 GE 2 with sha...

Page 89: ...visioned 8000 8000 IPSec Service Module ISM L2TP IPSec sessions 5000 5000 5000 5000 Service Module SM 16 000 16 000 16 000 16 000 L2TP tunnels per chassis 8000 8000 8000 8000 L2TP tunnels per line mod...

Page 90: ...upports a maximum of 32 000 static major interfaces Although the ERX1440 router supports a maximum of 48 000 static major interfaces for PPPoE the PPPoE static limit is enforced at the subinterface le...

Page 91: ...sis 100 100 100 100 Users per local user database 100 100 100 100 Users for all local user databases 100 100 100 100 RADIUS requests Concurrent RADIUS authentication requests 4000 4000 4000 32 000 Con...

Page 92: ...amic subscriber interfaces per line module 8000 8000 8000 8000 Static subscriber interfaces per chassis 16 000 32 000 32 000 48 000 Static subscriber interfaces per line module 8000 8000 8000 8000 Tab...

Page 93: ...umber if each VR and VRF instance is running a routing protocol 2 The maximum of 3000 VRs and VRFs can be achieved only with the SRP 120 and SRP 320 modules which have 4 GB of memory The limits cannot...

Page 94: ...other line module in slot 3 or slot 5 In this case you can only install the ES2 4G LM in slots 0 1 and 6 11 therefore the maximum number of ports and the forwarding performance per chassis is reduced...

Page 95: ...ums 87 Appendix A System Maximums Logical density per chassis Logical OC3 STM1 per chassis 96 192 Logical OC12 STM4 per chassis 24 48 Logical OC48 STM16 per chassis 6 12 Table 9 Physical and Logical D...

Page 96: ...s unchanged when EAP is not configured 4 The E120 router supports a maximum of 64 000 Ethernet subinterfaces that can be active at any one time The E320 router supports a maximum of 96 000 Ethernet su...

Page 97: ...tion total VCs per line module ES2 4G LM and OCx STMx ATM IOA 32 000 32 000 ATM bulk configuration overriding profile assignments per chassis 100 100 ATM VCs per chassis See Note 2 on page 88 64 000 9...

Page 98: ...2 10G LM 16 384 16 384 ES2 S1 GE 8 IOA with ES2 10G ADV LM 32 768 32 768 ES2 S1 10GE IOA with ES2 4G LM 16 384 16 384 ES2 S2 10GE PR IOA with ES2 10G LM or ES2 10G Uplink LM 16 384 16 384 ES2 S2 10GE...

Page 99: ...10G ADV LM or ES2 10G Uplink LM 4096 4096 ES2 S3 GE 20 IOA with ES2 10G LM or ES2 10G ADV LM 8192 8192 Ethernet VLAN bulk configuration VLAN ranges per chassis 1000 1000 Ethernet VLAN bulk configurati...

Page 100: ...which you can log PPP packets per chassis 32 32 PPPoE service name tables PPPoE service name tables per chassis 16 16 Service name tags per PPPoE service name table including one empty service name t...

Page 101: ...ng to your router configuration 4 Depending on your configuration the router may support more routing table entries or fewer routing table entries than this value In any case you can choose to limit t...

Page 102: ...ful restart is not enabled 500 000 500 000 MPLS next hops egress FECs when graceful restart is enabled 250 000 250 000 MPLS forwarding entries when graceful restart is not enabled 64 000 64 000 MPLS f...

Page 103: ...chassis 96 000 Multicast routes IPv4 and IPv6 Forwarding entries S G pairs per chassis See Note 7 on page 93 16 384 16 384 Outgoing interfaces per chassis See Note 8 on page 93 65 536 65 536 Response...

Page 104: ...ently used Attachment resources are only used when you attach the policy The line modules support policy attachments based on the following considerations IPv4 Up to 2 ingress policy attachments and 1...

Page 105: ...attachments 16 383 16 383 ES2 10G LM combined IP and IPv6 interface attachments 16 383 16 383 ES2 10G LM VLAN interface attachments 16 383 16 383 ES2 10G ADV LM IP interface attachments 32 000 32 000...

Page 106: ...4 000 ES2 10G LM 64 000 64 000 ES2 10G ADV LM 64 000 64 000 ES2 10G Uplink LM 64 000 64 000 Policy statistics blocks egress per line module ES2 4G LM 256 000 256 000 ES2 10G LM 256 000 256 000 ES2 10G...

Page 107: ...ernal parent groups only 8191 8191 ES2 10G Uplink LM internal parent groups only 8191 8191 Software lookup blocks per line module ES2 4G LM 16 383 16 383 ES2 10G LM 16 383 16 383 ES2 10G ADV LM 32 000...

Page 108: ...chassis 4000 4000 DVMRP IP in IP tunnels per line module with shared tunnel server ports provisioned 4000 4000 DVMRP IP in IP tunnels per ES2 S1 Service IOA See Note 1 on page 100 4000 4000 GRE tunne...

Page 109: ...orks Inc E120 and E320 System Maximums 101 Appendix A System Maximums L2TP tunnels per ES2 S1 Service IOA See Note 1 and Note 2 on page 100 16 000 16 000 Table 13 Tunneling MaximumsTable continued on...

Page 110: ...n the E320 router the SRP 320 supports a maximum of 96 000 interfaces The SRP 100 supports a maximum of 64 000 interfaces 3 For DHCPv6 local server up to 32 000 subscribers and clients are supported o...

Page 111: ...nstances 200 200 SRC clients 200 200 SRC interfaces 48 000 96 000 Subscriber interfaces See Note 2 on page 102 Dynamic subscriber interfaces per chassis 64 000 96 000 Dynamic subscriber interfaces per...

Page 112: ...JunosE 11 1 1 Release Notes 104 E120 and E320 System Maximums Copyright 2010 Juniper Networks Inc...

Page 113: ...andwidth at the shared rate limit because of oversubscription the packet is demoted and remarked The demoted packets from flow A are marked with the ToS value of 20 but the demoted packets from flows...

Page 114: ...mark 10 host1 config color mark profile yellow mark 20 host1 config color mark profile red mark 20 host1 config color mark profile exit host1 config ip color mark profile BC host1 config color mark pr...

Page 115: ...assifier group exit host1 config policy list classifier group B parent group S host1 config policy list classifier group rate limit profile indiv host1 config policy list classifier group mark profile...

Page 116: ...JunosE 11 1 1 Release Notes 108 Example Aggregate Marking with Oversubscription Rate Limiting Hierarchical Policy Copyright 2010 Juniper Networks Inc...