mopdf.com

11Routing Protocols 235Security 235Juniper Sky ATP 236Subscriber Management and Services 237Virtual Routing 237What's Changed 238Application Security 238Authentication and Access Control 239Junos OS XML API and Scripting 239J-Web 239Licensing 239Network Management and Monitoring 239System Logging 240Unified Threat Management (UTM) 240VPN 240Known Limitations 241J-Web 241Logical Systems and Tenant Systems 241VPNs 241Open Issues 242Application Security 242J-Web 242Platform and Infrastructure 243Routing Policy and Firewall Filters 243VPNs 243Resolved Issues 244Application Layer Gateways (ALGs) 244Application Security 244Authentication and Access Control 245Chassis Clustering 245Class of Service (CoS) 245Flow-Based and Packet-Based Processing 245Infrastructure 247Interfaces and Routing 247

12Installation and Upgrade 247Interfaces and Chassis 247Intrusion Detection and Prevention (IDP) 248J-Web 248Network Address Translation (NAT) 248Network Management and Monitoring 248Platform and Infrastructure 249Routing Policy and Firewall Filters 250Unified Threat Management (UTM) 250User Interface and Configuration 251VPNs 251Documentation Updates 252Migration, Upgrade, and Downgrade Instructions 253Upgrade and Downgrade Support Policy for Junos OS Releases and Extended End-Of-LifeReleases 253Upgrading Using ISSU 254Licensing 254Finding More Information 255Documentation Feedback 255Requesting Technical Support 256Self-Help Online Tools and Resources 256Opening a Case with JTAC 257Revision History 257

13Introduction Junos OS runs on the following Juniper Networks hardware: ACX Series, EX Series, M Series, MX Series,NFX Series, PTX Series, QFabric systems, QFX Series, SRX Series, T Series, and Junos Fusion.These release notes accompany Junos OS Release 19.3R1 for the ACX Series, EX Series, MX Series, NFXSeries, PTX Series, QFX Series, SRX Series, and Junos Fusion. They describe new and changed features,limitations, and known and resolved problems in the hardware and software.Junos OS Release Notes for ACX SeriesIN THIS SECTIONWhat's New 14What's Changed 21Known Limitations 23Open Issues 25Resolved Issues 28Documentation Updates 31Migration, Upgrade, and Downgrade Instructions 31These release notes accompany Junos OS Release 19.3R1 for the ACX Series. They describe new andchanged features, limitations, and known and resolved problems in the hardware and software.You can also find these release notes on the Juniper Networks Junos OS Documentation webpage, locatedat https://www.juniper.net/documentation/product/en US/junos-os.

14What's NewIN THIS SECTIONWhat’s New in 19.3R1-S1 14What’s New in 19.3R1 15Learn about new features introduced in this release for ACX Series routers.What’s New in 19.3R1-S1Hardware New ACX5448-M Universal Metro Routers—In Junos OS Release 19.3R1-S1, we introduce theACX5448-M, a top-of-rack router with support for advanced security capabilities such as Media AccessControl Security (MACsec). A compact 1 U model, the ACX5448-M provides a system throughput of upto 800 Gbps through the following port configuration: Forty-four 10-Gigabit Ethernet SFP or 1-Gigabit Ethernet SFP ports (0 through 43). The ACX5448-Msupports MACsec only on these ports. Six 100-Gigabit Ethernet QSFP28 or 40-Gigabit Ethernet QSFP ports (44 through 49). You canchannelize each QSFP28 port into four 25-Gbps interfaces and each QSFP port into 10-Gbps interfacesusing breakout cables (and the channelization configuration).The ACX5448-M routers have redundant fan modules and redundant AC or DC power supply modules. New ACX5448-D Universal Metro Routers—In Junos OS Release 19.3R1-S1, we introduce theACX5448-D, a top-of-rack router for aggregation environments. Designed for packet-optical convergence,this compact 1 U router provides wire-speed packet performance, very low latency, and a rich set ofLayer 2 and Layer 3 features.The ACX5448-D provides a system throughput of up to 800 Gbps through the following portconfiguration: Thirty-six 10-Gigabit Ethernet SFP or 1-Gigabit Ethernet SFP ports (0 through 35). Two 100-Gigabit Ethernet QSFP28 or 40-Gigabit Ethernet QSFP ports (36 and 37). You can channelizeeach QSFP28 port into four 25-Gbps interfaces and each QSFP port into four 10-Gbps interfacesusing breakout cables (and the channelization configuration). Two 200-Gigabit Ethernet CFP2-DCO ports (38 and 39).The ACX5448-D routers have redundant fan modules and redundant AC or DC power supply modules.

15What’s New in 19.3R1Class of Service Class of Service (CoS) parity support for ACX5000 routers—Starting in Junos OS 19.3R1, theClass-of-Service feature set is supported on ACX5000 devices to enable users to configure classification,rewrite, shaping, queueing, and scheduling parameters for traffic flow.For more information regarding CoS, see Understanding Class of Service. Support for Class-of-Service (CoS) for ACX5448 devices—Starting in Junos OS 19.3R1, support isprovided for Class-of-Service (COS) on ACX5448 devices to include firewall filter families (ANY, VPLS,ethernet-switching, CCC, IPv6, IPv4, Lo0-IPv6, Lo0-IPv4, and MPLS), and CoS (classification, policing,forwarding policy, forwarding class to queue map, WRED and Tail drop profiles, fabric queue andscheduling configuration, scheduler, deep buffers, and remarking).For more information regarding CoS, see Understanding Class of Service.High Availability (HA) and Resiliency VRRP support (ACX5448)—Starting in Junos OS Release 19.3R1, the ACX5448 router supports theVirtual Router Redundancy Protocol (VRRP) over aggregated Ethernet and integrated routing and bridging(IRB) interfaces. The VRRP queue size is limited, so it doesn’t disturb other protocols such as BidirectionalForwarding Detection (BFD) and connectivity fault management (CFM). The ACX5448 supports 16VRRP groups.[See Understanding VRRP. ] Software Support (ACX5448-D and ACX5448-M)—Starting in Junos OS Release 19.3R1, ACX5448-Dand ACX5448-M routers support: Chassis management software—Manages the onboard FRUs Upgradable common BIOS software—Initializes all the devices on the hardware FPC and PIC managementInterfaces and Chassis Hardware resiliency support (ACX5448-D and ACX5448-M)—Starting in Junos OS Release 19.3R1,ACX5448-D and ACX5448-M routers support the resiliency feature, which includes handling of hardwarefailure and faults. Resiliency on an ACX5448-D enhances its debugging capability in the case of hardwarefailure of its components such as Routing Engine, solid-state drive (SSD), and PCI Express. For example,the resiliency feature enables the router to recover from inter-integrated circuit (I2C) failure, and improvesits voltage monitoring, temperature monitoring, and PCI Express error handling and reporting. Theresiliency feature also provides DRAM single-bit and multibit error checking and correction (ECC)capabilities.[See show chassis fpc errors.]

16 Interface speed, channelization, and MACsec support (ACX5448-M)—In Junos OS Release 19.3R1, weintroduce the ACX5448-M Universal Metro Router with support for advanced security capabilities suchas Media Access Control Security (MACsec). The ACX5448-M has the following port types: Forty-four 10-Gigabit Ethernet or 1-Gigabit Ethernet SFP ports (0 through 43). Based on the opticsplugged in, the ports come up either as 1-Gbps or 10-Gbps. Six 100-Gigabit Ethernet QSFP28 ports (44 through 49). These ports support 100-Gbps (the default)and 40-Gbps speeds. You can channelize these ports into four 25-Gbps or four 10-Gbps interfaces.The 44 SFP ports on the ACX5448-M support MACsec; however, the six QSFP28 ports do not supportMACsec.[See Channelize Interfaces on ACX5448-D and ACX5448-M Routers.]Layer 2 Features Support for Layer 2 Features (ACX5448-D and ACX5448-M)—Starting in Junos OS Release 19.3R1,Junos OS supports Layer 2 bridging, Q-in-Q tunneling, no-local switching, Layer 2 protocol tunneling,Spanning Tree Protocols (RSTP,MSTP), Bridge Protocol Data Unit (guard, root and loop protect), EthernetOAM, VPLS, BGP, LDP, pseudowire ping, and Bidirectional Forwarding Detection (BFD) support forvirtual circuit connectivity verification (VCCV) on ACX5448-D and ACX5448-M routers. Support for Layer 2 switching cross-connects (ACX5440)—Starting in Junos OS Release 19.3R1, youcan leverage the hardware support available for cross-connects on the ACX5448 device with the Layer2 local switching functionality using certain models. With this support, you can provide the EVP andEthernet Virtual Private Line (EVPL) services.[See Configuring Layer 2 Switching Cross-Connects Using CCC.]Layer 3 Features Support for Layer 3 features (ACX5448-D and ACX5448-M)—Starting in Junos OS Release 19.3R1,Junos OS supports Layer 3 protocols, multicast, and MPLS as the transport mechanism on ACX5448-Dand ACX5448-M routers.Management OpenConfig AAA data model support (ACX1100, ACX2100, ACX5448, ACX6360, EX4300, MX240,MX480, MX960, MX10003, PTX10008, PTX10016, QFX5110, and QFX10002)—Junos OS Release19.3R1 supports the configuration leaves specified in the OpenConfig AAA data model. Mapping theOpenConfig AAA configuration to the Junos AAA configuration using the following YANG files in thedata model makes this support possible: openconfig-aaa.yang openconfig-aaa-types.yang openconfig-aaa-tacacs.yang openconfig-aaa-radius.yang

17The configuration model supporting the OpenConfig data model includes: A translation script (.py / .slax) that maps each configuration leaf in the OpenConfig schema to oneor more configuration leafs in the JUNOS OS schema. A deviation file (.yang) that specifies how much the implementation deviates from the vendor-neutralmodel.[See Mapping OpenConfig AAA Commands to Junos Configuration.]Network Management and Monitoring Support for adding custom YANG data models to the Junos OS schema (ACX5448-D andACX5448-M)—Starting in Junos OS Release 19.3R1, ACX5448-D and ACX5448-M routers supportloading custom YANG data models on the device, which enables you to add RPCs or configurationhierarchies that are customized for your operations. The ability to add data models to a device is beneficialwhen you want to create device-agnostic RPCs and configuration models that can be used on differentdevices from one or more vendors.[See Understanding the Management of Non-Native YANG Modules on Devices Running Junos OS.]Port Security Media Access Control Security (MACsec) support (ACX5448)—Starting with Junos OS Release 19.3R1,ACX5448 routers support MACsec on 1-Gigabit Ethernet SFP and 10-Gigabit Ethernet SFP ports.MACsec is an industry-standard security technology that provides secure communication for all trafficon point-to-point Ethernet links. MACsec is standardized in IEEE 802.1AE.[See Understanding Media Access Control Security (MACsec).]Routing Policy and Firewall Filters Match condition support for IPv6 firewall filters (ACX6360)—Starting in Junos OS Release 19.3R1, theACX6360 router supports the following firewall filter match conditions for IPv6 traffic: address,destination-address, destination-port, destination-port-except, destination-prefix-list, port, port-except,icmp-code, icmp-code-except, icmp-type, icmp-type-except, next-header, next-header-except, prefix-list,source-address, source-port, source-port-except, and source-prefix-list.[See Firewall Filter Match Conditions for IPv6 Traffic on ACX Series Routers and ACX6360Documentation. ]Routing Protocols Clocking and Synchronous Ethernet support (ACX5448)—Starting in Junos OS Release 19.3R1, ACX5448routers support frequency synchronization using the Synchronous Ethernet and Ethernet SynchronizationMessage Channel (ESMC) protocols. The routers also support phase and time synchronization throughPrecision Time Protocol (PTP).[See Synchronous Ethernet Overview.]

18 Transparent clock over IPv6 support (ACX5448)—Starting with Junos OS Release 19.3R1, ACX5448routers support transparent clock functionality for PTP over IPv6. To configure the transparent clockfunctionality, you must include the e2e-transparent statement at the [edit protocol ptp] hierarchy level.Use the show ptp global-information command to check the status of the transparent clock functionalityconfigured on the router.[See Understanding Transparent Clocks in Precision Time Protocol.] Support for RIPv2 (ACX5448)—Starting in Junos OS Release 19.3R1, Junos OS supports RIP version 2(RIPv2) for both IPv4 and IPv6 packets.Services Applications Support for Two-Way Active Measurement Protocol or TWAMP (ACX5448-D and ACX5448-M)—Startingin Junos OS Release 19.3R1, you can configure TWAMP on your ACX5448-D and ACX5448-M routers.TWAMP enables you measure the IP performance between two devices in a network. The ACX5448-Dand ACX5448-M routers support only the reflector side of TWAMP.[See Two-Way Active Measurement Protocol on ACX Series.] Support for virtualization (ACX5448-D and ACX5448-M)—Starting in Junos OS Release 19.3R1, theRouting Engines on the ACX5448-D routers and ACX5448-M routers support virtualization.On Routing Engines of ACX5448-D routers and ACX5448-M routers, one instance of Junos OS, whichruns as a guest operating system, is launched by default. The user needs to log in to this instance foroperations and management.With virtualization of the Routing Engine, Junos OS supports new request and show commands associatedwith host and hypervisor processes. The commands are related to: Reboot, halt, and power management for the host Software upgrade for the host Disk snapshot for the host[See What Are VM Hosts?.] Port mirroring support for the IPv6 address family (ACX6360)—Starting in Release 19.3R1, you canconfigure port mirroring on the ACX6360 router for the inet6 family. Port mirroring copies packetsentering or exiting a port and sends the copies to a local interface for local monitoring. You can use portmirroring to send traffic to applications that analyze traffic for purposes such as monitoring compliance,enforcing policies, detecting intrusions, monitoring and predicting traffic patterns, and correlating events.[See Configuring Port Mirroring.]

19Software Installation and Upgrade Migration of Linux kernel version—Starting in Junos OS Release 19.3R1, the following devices supportthe Wind River Linux 9 (WRL9) kernel version:PlatformsRouting Engine SupportedACX5448-DRE-ACX-5448MX240, MX480, and MX960RE-S-X6-64GMX2020 and 0x8MX2008RE-MX2008-X8-64GMX10016RE X10MX10008RE -2X00x4/RE X10PTX10008RE-PTX-2X00x4/RE X10002RE-QFX10002-60C

20PlatformsRouting Engine rting in Junos OS Release 19.3R1, in order to install a VM host image based on Wind River Linux 9,you must upgrade the i40e NVM firmware on the following routers: MX Series—MX240, MX480, MX960, MX2010, MX2020, MX2008, MX10016, and MX10008 PTX Series—PTX3000, PTX5000, PTX10016, PTX10008, and PTX10002-XXIf you perform a software upgrade on a router with i40e NVM version earlier than 6.01, the upgradefails and the following error message is displayed:ERROR: i40e NVM firmware is not compatible ,please upgrade i40e NVM before installing this packageERROR: Aborting the installationERROR: Upgrade failed[See https://kb.juniper.net/TSB17603.]System Management Transparent clock functionality support on (ACX5448)—Starting in Junos OS Release 19.3R1, transparentclock functionality and a global configuration for enabling it are supported on the ACX5448 router.Transparent clock functionality works for PTP over both IPv4 and Ethernet packets. To check the statusof transparent clock, use the show ptp global-information command.[See Understanding Transparent Clocks in Precision Time Protocol. ] Synchronous Ethernet and PTP support (ACX 5448)—Starting in Junos OS Release 19.3R1, the ACX5448router supports the following features: Frequency synchronization using Synchronous Ethernet Ethernet Synchronization Message Channel (ESMC) Phase and time synchronization using Precision Timing Protocol (PTP)[See Synchronous Ethernet Overview. ]SEE ALSOWhat's Changed 21Known Limitations 23Open Issues 25

21Resolved Issues 28Documentation Updates 31Migration, Upgrade, and Downgrade Instructions 31What's ChangedIN THIS SECTIONGeneral Routing 22Junos OS XML API and Scripting 22Interfaces and Chassis 22System Logging 23Operation, Administration, and Maintenance (OAM) 23See what changed in this release for ACX Series routers.

22General Routing Support for gigether-options statement (ACX5048, ACX5096)—Junos OS supports the gigether-optionsstatement at the edit interfaces interface-name hierarchy on the ACX5048 and ACX5096 routers.Previously, support for the gigether-statement was deprecated.[See gigether-options.]Junos OS XML API and Scripting Range defined for confirm-timeout value in NETCONF and Junos XML protocol sessions (ACX Series,EX Series, MX Series, PTX Series, QFX Series, and SRX Series)—Starting in Junos OS Release 19.3R1,the value for the confirm-timeout element in the Junos XML protocol commit-configuration operation must be in the range 1 through 65,535 minutes, and the value for the confirm-timeout element in the NETCONF commit operation must be in the range 1 through 4,294,967,295 seconds.In earlier releases, the range is determined by the minimum and maximum value of its unsigned integerdata type.Interfaces and Chassis Support for creating Layer 2 logical interfaces independently (ACX Series)—In Junos OS Release 19.3R1and later, ACX Series switches support creating Layer 2 logical interfaces independent of the Layer 2routing instance type. That is, you can configure and commit the Layer 2 logical interfaces separatelyand add the interfaces to the bridge domain or EVPN routing instance separately. Note that the Layer2 logical interfaces work fine when they are added to the bridge domain or EVPN routing instance.In the earlier Junos OS releases, when a Layer 2 logical interface configuration (units with

Junos OS19.3R1ReleaseNotes SUPPORTEDON onProviderEdge