Multipleoption82

JunosOSRelease13.
2X50ReleaseNotesforJuniperNetworksEXSeriesEthernetSwitchesRelease13.
2X50-D1022August,2013Revision5ContentsNewFeaturesinJunosOSRelease13.
2X50forEXSeriesSwitches3EnhancedLayer2Software(ELS)3EX4300Switches3AdditionalHardware10ManagementandRMON11ChangesinDefaultBehaviorandSyntaxinJunosOSRelease13.
2X50forEXSeriesSwitches11LimitationsinJunosOSRelease13.
2X50forEXSeriesSwitches11EthernetSwitchingandSpanningTrees12FirewallFilters12Hardware12HighAvailability13Infrastructure13Interfaces14J-WebInterface15Layer2andLayer3Protocols15ManagementandRMON15VirtualChassis16OutstandingIssuesinJunosOSRelease13.
2X50forEXSeriesSwitches17AccessControlandPortSecurity18ClassofService20EthernetSwitchingandSpanningTrees20FirewallFilters20Infrastructure20Interfaces23J-WebInterface23ManagementandRMON241Copyright2013,JuniperNetworks,Inc.
MulticastProtocols24SoftwareUpgradeandInstallation25ResolvedIssuesinJunosOSRelease13.
2X50forEXSeriesSwitches25IssuesResolvedinRelease13.
2B125AccessControlandPortSecurity25EthernetSwitchingandSpanningTrees25FirewallFilters26HighAvailability26Infrastructure26Layer2andLayer3Protocols27ManagementandRMON27SoftwareInstallationandUpgrade27VirtualChassis27IssuesResolvedinRelease13.
2X50-D1027AccessControlandPortSecurity28DeviceSecurity28FirewallFilters28HighAvailability28Infrastructure28J-WebInterface28VirtualChassis28ChangestoandErratainDocumentationforJunosOSRelease13.
2X50forEXSeriesSwitches29ChangestoJunosOSforEXSeriesSwitchesDocumentation29Errata29UpgradeandDowngradeInstructionsforJunosOSRelease13.
2X50forEXSeriesSwitches29UpgradeandDowngradeSupportPolicyforJunosOSReleases29UpgradingtoJunosOSRelease12.
1R2orLaterwithExistingVSTPConfigurations30UpgradingfromJunosOSRelease10.
4R3orLater30UpgradingfromJunosOSRelease10.
4R2orEarlier32UpgradingfromJunosOSRelease12.
3orEarlier32UpgradingEXSeriesSwitchesUsingNSSU32RevisionHistory35Copyright2013,JuniperNetworks,Inc.
2EXSeriesSwitchesReleaseNotesNewFeaturesinJunosOSRelease13.
2X50forEXSeriesSwitchesThissectiondescribesnewfeaturesinRelease13.
2X50oftheJunosoperatingsystem(JunosOS)forEXSeriesswitches.
NotallEXSeriessoftwarefeaturesaresupportedonallEXSeriesswitchesinthecurrentrelease.
ForalistofallEXSeriessoftwarefeaturesandtheirplatformsupport,seeEXSeriesSwitchSoftwareFeaturesOverviewandEXSeriesVirtualChassisSoftwareFeaturesOverview.
Newfeaturesaredescribedonthefollowingpages:EnhancedLayer2Software(ELS)onpage3EX4300Switchesonpage3AdditionalHardwareonpage10ManagementandRMONonpage11EnhancedLayer2Software(ELS)UniformEnhancedLayer2Software(ELS)CLIconfigurationstatementsandoperationalcommands—ELSprovidesauniformcommand-lineinterface(CLI)forconfiguringandmonitoringLayer2featuresonEXSeriesswitchesthatsupportELS,suchasEX4300andEX9200switches,andonMXSeriesroutersinLANmode(MX-ELM).
ForinformationontheELSfeaturessupportedonEX4300switches,seetheEX4300Switchessectionlaterinthesereleasenotes.
TheWeb-basedELSTranslatortoolisavailableforregisteredcustomerstohelpthembecomefamiliarwiththeELSCLIandtoquicklytranslateexistingEXSeriesswitch–basedCLIconfigurationsintoELSCLIconfigurations.
[SeeELSTranslator.
]EX4300SwitchesEX4300switchhardware—JuniperNetworksEX4300EthernetSwitchesprovideconnectivityforhigh-densityenvironmentsandscalabilityforgrowingnetworks.
TheseswitchescanbedeployedwhereveryouneedhighdensityofGigabitEthernetports(24to48ports)orredundancy.
Typically,EX4300switchesareusedinlargebranchoffices,campuswiringclosets,anddatacenters,wheretheycanbepositionedasthetopdeviceinaracktoprovideconnectivityforallthedevicesintherackandprovideoptionsforoptimizedairflow(hotaisleorcoldaisle).
TheEX4300switchesareavailablein24-portand48-portmodels,withorwithoutPoE+,andwithfouradditional40-gigabitquadsmallform-factorpluggable(QSFP+)uplinkports.
Allmodelsprovideforanoptional4-port10-gigabitSFP+uplinkmodulethataccepts1-gigabitor10-gigabitSFPorSFP+transceivers.
ThefollowingopticsaresupportedonEX4300switches:EX-SFP-10GE-SREX-SFP-10GE-LREX-SFP-10GE-LRM3Copyright2013,JuniperNetworks,Inc.
NewFeaturesinJunosOSRelease13.
2X50forEXSeriesSwitchesEX-SFP-1GE-SXEX-SFP-1GE-LXEX-SFP-10GE-USREX-SFP-10GE-EREX-QSFP-40GE-SR4EX-SFP-10GE-DAC-1MEX-SFP-10GE-DAC-3MEX-SFP-10GE-DAC-5MEX-SFP-10GE-DAC-7MEX-QSFP-40GE-DAC-50CMEX-QSFP-40GE-DAC-1MEX-QSFP-40GE-DAC-3MELSfeaturesforEX4300switchesinclude:Accesscontrol—SupportforcontrollingaccesstoyournetworkthroughanEXSeriesswitchbyusingseveraldifferentauthenticationmethods,byconfiguring802.
1X,MACRADIUS,oracaptiveportal.
Younowenabletheauthentication-whiteliststatementatthe[editswitching-options]hierarchylevelinsteadofatthe[editethernet-switching-options]hierarchylevel.
CoSsupport—SupportforCoSfeatures,includingingressclassification,re-marking(egressrewrite),scheduling,queuing,buffermanagement,andingresspolicers,VirtualChassissupportforCoS,andCoSforhostoutboundtraffic.
Additionalsupportedfeaturesinclude:Supportforapplyingrewriterulesonaport(interface).
Supportforconfiguringthepercentageofexcesstrafficforeachqueue.
Anewconfigurationstatement,excess-rate,isnowavailableatthe[editclass-of-serviceschedulersscheduler-name]hierarchylevel.
SupportfortheWREDcongestionmanagementmechanism.
Anewconfigurationstatement,drop-probabilitypercentage,isavailableatthe[editclass-of-servicedrop-profilesprofile-name]hierarchyleveltosupporttheWREDconfiguration.
Supportforfourlosspriorities:high,low,medium-high,andmedium-low.
Themedium-lowandmedium-highlossprioritiesarenewprioritiesforEX4300switches.
Supportforschedulingstrict-highpriorityqueuesinround-robinschedulingandtakingthequeuenumberintoconsideration.
Supportfordefaultforwardingclassesformultidestinationtraffic;theclassesare:multicast-afmulticast-beCopyright2013,JuniperNetworks,Inc.
4EXSeriesSwitchesReleaseNotesmulticast-efmulticast-ncThedefaultbandwidthdistributionrateis:Besteffort:75percentNetworkcontrol:5percentMulticastbesteffort:15percentMulticastnetworkcontrol:5percentFirewallfilters—Supportforfirewallfiltersthatcanbeconfiguredonports,VLANs,andLayer3interfaces.
Youconfigurefirewallfiltersatthe[editfirewall]hierarchylevel.
Linkaggregation—SupportfortheabilitytogrouptogetheroneormoreEthernetinterfacestoformaLAG,whichaMACclientcantreatasasinglelink.
Thelinkaggregationfeaturehasthefollowingbenefits:IncreasedbandwidthIncrementalbandwidthGracefuldegradationasfailureoccursIncreasedavailabilityTheEX4300switchsupportsupto112LAGs,andeachLAGcanhaveupto8members.
AggregatedEthernetinterfacesareconfiguredatthe[editinterfacesaexaggregated-ether-options]hierarchylevel.
Stormcontrol—Supportforstormcontrolthatenablestheswitchtomonitortrafficlevelsandtodropbroadcast,multicast,andunknownunicastpacketswhenaspecifiedtrafficlevel—calledthestormcontrollevel—isexceeded,therebypreventingpacketsfromproliferatinganddegradingtheLAN.
StormcontrolisenabledbydefaultonallLayer2interfaces.
Youcanmodifythestorm-controlconfigurationwithatwo-stepprocess:1.
Configureastorm-controlprofileatthe[editforwarding-options]hierarchylevel.
2.
Bindthestorm-controlprofiletoaspecificlogicalinterfaceortoagroupoflogicalinterfaces.
Thegroupcanincludearangeofinterfacesorallinterfacesontheswitch.
IGMPsnooping—SupportforInternetGroupManagementProtocol(IGMP)snooping.
IGMPsnoopingconstrainsthefloodingofIPv4multicasttrafficonVLANsontheswitch.
WhenIGMPsnoopingisenabled,theswitchexaminesIGMPmessagesbetweenhostsandmulticastroutersandlearnswhichhostsareinterestedinreceivingtrafficforamulticastgroup.
Basedonwhatitlearns,theswitchthenforwardsmulticasttrafficonlytothoseinterfacesthatareconnectedtointerestedreceiversinsteadoffloodingthetraffictoallinterfaces.
IGMPsnoopingisconfiguredatthe[editprotocolsigmp-snooping]hierarchylevel.
TheEX4300switchsupportsIGMPv1,IGMPv2,andIGMPv3.
5Copyright2013,JuniperNetworks,Inc.
NewFeaturesinJunosOSRelease13.
2X50forEXSeriesSwitchesInapureLayer2environment,trafficisnotforwardedbetweenVLANs.
ForahostinoneVLANtoreceivethemulticasttrafficfromthesourceinanotherVLAN,youmustcreateanIRBinterfaceineachoftheVLANstopermitroutingofthemulticasttrafficbetweentheVLANs.
Inaddition,youmustenableProtocolIndependentMulticast(PIM)ontheswitchtoperformthemulticastrouting.
TheEX4300switchalsosupportstheroutingofmulticasttrafficbetweenmulticastroutingdomains.
YoumustenablePIMandMulticastSourceDiscoveryProtocol(MSDP)ontheswitchfortheswitchtoperformmulticastrouting.
IPv4andIPv6unicastroutes—SupportforIPv4andIPv6unicastroutes,whichalongwithIPv4andIPv6multicastroutes,arestoredinaflexibleforwardingtable.
Thisforwardingtablefunctionsasadynamicstorageresource.
Therearenoconfigurableparametersforthisforwardingtable.
Layer2bridgingandcontrolprotocolfeatures—SupportforthefollowingLayer2bridgingandcontrolprotocolfeatures:Layer2accessandtrunkinterfaces.
Configureaccessortrunkmodeatthe[editinterfacesinterface-nameunit0familyethernet-switchinginterface-mode]hierarchylevel.
AVLANspecifiedwithaVLANID,oraVLANspecifiedwithmultiplerangesofVLANIDs.
ConfigureVLANsatthe[editvlans]hierarchylevel.
802.
1QVLANtrunking.
NotethatonlyEtherType0x8100issupportedforidentifyingVLAN-taggedpackets.
Configuretheinterfacemodeastrunkwiththesetinterfacesinterface-nameunit0familyethernet-switchinginterface-modetrunkcommand.
Integratedroutingandbridging(IRB).
ThisfeatureissimilartoroutedVLANinterfaces(RVIs),whicharesupportedonEXSeriesswitchesthatarenotrunningELS.
ConfigureIRBinterfacesatthe[editvlans]and[editinterfaces]hierarchylevels.
DeterminethecurrentstateofIRBinterfacesbyenteringtheshowinterfacesirbcommand.
Theconfigurationofupto4093VLANs.
ConfigureVLANsatthe[editvlans]hierarchylevel.
TheabilitytoenableordisableMACaddresslearning.
Bydefault,MACaddresslearningisenabledglobally,perinterface,andperVLAN.
DisableMACaddresslearninggloballyatthe[editprotocolsl2-learning]and[editswitch-optionsno-mac-learning]hierarchylevels,perinterfaceatthe[editswitch-optionsinterfaceinterface-nameno-mac-learning]hierarchylevel,andperVLANatthe[editvlansvlan-nameswitch-optionsno-mac-learning]hierarchylevel.
TheabilitytosetaglobalMACaddressagingtime.
Configurethisfeatureatthe[editprotocolsl2-learningglobal-mac-table-aging-time]hierarchylevel.
TheabilitytoenableordisableaMAClimitperinterfaceandperVLAN,andtosetanactiontotakeonthenextpackettheinterfaceorVLANreceivesafterthelimitisreached.
ConfigureaMAClimitperinterfaceatthe[editswitch-optionsinterfaceinterface-nameinterface-mac-limitlimitpacket-actionaction]hierarchylevel.
ForaVLAN,youcandothefollowing:Copyright2013,JuniperNetworks,Inc.
6EXSeriesSwitchesReleaseNotesConfigurealimitforthenumberofMACaddressesthatcanbelearnedbyaVLANatthe[editvlansvlan-nameswitch-optionsmac-table-sizepacket-actionaction]hierarchylevel.
ConfigureaMAClimitforallinterfacesintheVLANatthe[editvlansvlan-nameswitch-optionsinterface-mac-limitlimitpacket-actionaction]hierarchylevel.
ConfigureaMAClimitforaspecifiedinterfaceintheVLANatthe[editvlansvlan-nameswitch-optionsinterfaceinterface-nameinterface-mac-limitlimitpacket-actionaction]hierarchylevel.
StaticMACaddress.
TheEthernetswitchingtable,alsoknownastheforwardingtable,specifiestheknownlocationsofVLANnodesandtheaddressesofdeviceswithinthosenodes.
TherearetwowaystopopulatetheEthernetswitchingtableonaswitch.
TheeasiestmethodistolettheswitchupdatethetablewithMACaddresses.
Thesecondwayistomanuallyinsertaddressesintothetable.
Youcandothistoreducefloodingandspeeduptheswitch'sautomaticlearningprocess.
ToconfigureadevicetohaveastaticMACaddress,issuethestatic-macmac-addressstatementatthe[editvlansvlan-nameswitch-optionsinterfaceinterface-name]hierarchylevel.
MACmovelimit.
WhenMACmovelimitingisconfigured,MACaddressmovementsaretrackedbytheswitch,andifaMACaddresschangesmorethantheconfigurednumberoftimeswithin1second,thechangestoMACaddressesaredropped,logged,orignored,ortheinterfaceisshutdown.
ConfigurealimitforthenumberoftimesthataMACaddresscanmove,andspecifytheactiontobetakenbyissuingthemac-move-limitlimitpacket-actionactionstatementatthe[editvlansvlan-nameswitch-options]hierarchylevel.
MACaddressfiltering,whichissupportedonasingleEthernetinterfacebutnotonaggregatedEthernetinterfaces.
Unknownunicastforwarding.
MultipleVLANRegistrationProtocol(MVRP),whichisusedtomanagetheaddition,deletion,andrenamingofVLANs.
ConfigureMVRPatthe[editprotocolsmvrp]hierarchylevel.
Nativeanalyzersupport—Supportfornativeanalyzersandremoteport-mirroringcapabilities.
Anativeanalyzerconfigurationcontainsbothaninputstanzaandanoutputstanzainthisanalyzerhierarchyformirroringpackets.
Inremoteportmirroring,themirroredtrafficisfloodedintoaremotemirroringVLANthatcanbespecificallycreatedforthepurposeofreceivingmirroredtraffic.
OnEX4300switches,theanalyzerconfigurationisavailableatthe[editforwarding-options]hierarchylevel.
Portsecurity—Supportforthefollowingportsecurityfeatures:DHCPsnoopingDynamicARPinspection(DAI)IPsourceguardDHCPoption827Copyright2013,JuniperNetworks,Inc.
NewFeaturesinJunosOSRelease13.
2X50forEXSeriesSwitchesStaticIPaddressTrustedDHCPinterfaceAllofthesefeaturescanbeenabledordisabledatthe[editvlansforwarding-optionsdhcp-security]hierarchylevel.
IfyouenableDAIorIPsourceguard,DHCPsnoopingisalsoenabledimplicitlyforallVLANs.
Also,ifyouconfigureagroupofaccessinterfacesatthe[editvlans]hierarchylevel,theconfigurationimplicitlyenablesDHCPsnooping.
DAI—DAIprotectsswitchesagainstARPspoofing.
DAIinspectsARPpacketsontheLANandusestheinformationintheDHCPsnoopingdatabaseontheswitchtovalidateARPpacketsandtoprotectagainstARPcachepoisoning.
ToenableDAIonaVLAN,issuethearp-inspectionstatementatthe[editvlansvlan-nameforwarding-optionsdhcp-security]hierarchylevel.
DHCPoption82—YoucanuseDHCPoption82,alsoknownastheDHCPrelayagentinformationoption,tohelpprotecttheswitchagainstattackssuchasspoofing(forging)ofIPaddressesandMACaddresses,andDHCPIPaddressstarvation.
Option82providesinformationaboutthenetworklocationofaDHCPclient,andtheDHCPserverusesthisinformationtoimplementIPaddressesorotherparametersfortheclient.
ToenableDHCPoption82,issuetheoption-82statementatthe[editvlansvlan-nameforwarding-optionsdhcp-security]hierarchylevel.
IPsourceguard—YoucanusetheIPsourceguardaccessportsecurityfeaturetomitigatetheeffectsofsourceIPaddressspoofingandsourceMACaddressspoofing.
IfIPsourceguarddeterminesthatahostconnectedtoanaccessinterfacehassentapacketwithaninvalidsourceIPaddressorsourceMACaddressinthepacketheader,itdiscardsthepacket.
ToenableIPsourceguardonaVLAN,issuetheip-source-guardstatementatthe[editvlansvlan-nameforwarding-optionsdhcp-security]hierarchylevel.
StaticIP—Youcanaddstatic(fixed)IPaddressesandbindthemtofixedMACaddressesintheDHCPsnoopingdatabase.
ToconfigureastaticIP/MACbindingintheDHCPsnoopingdatabase,youmustfirstcreateagroupofaccessinterfacesatthe[editvlansvlan-nameforwarding-optionsdhcp-security]hierarchylevel.
ToconfigureaspecificinterfacewithinthegrouptohaveastaticIPaddressthatisboundtoafixedMACaddress,issuethegroupgroup-nameinterfaceinterface-namestatic-ipip-addressmac-addressstatementatthe[editvlansvlan-nameforwarding-optionsdhcp-security]hierarchylevel.
TrustedDHCPserverinterface—YoucanconfigureanyinterfaceonaswitchthatconnectstoaDHCPserverasatrustedinterface(port).
ConfiguringaDHCPserveronatrustedinterfaceprotectsagainstrogueDHCPserverssendingleases.
Bydefault,allaccessinterfacesareuntrusted,andalltrunkinterfacesaretrusted.
However,youcanoverridethedefaultsettingforaccessinterfacesbyconfiguringagroupofaccessinterfaceswithinaVLAN,specifyinganinterfacetobelongtothatgroup,andthenconfiguringthegroupastrusted.
ToconfigureanuntrustedaccessinterfaceasatrustedinterfaceforaDHCPserver,issuetheoverridestrustedstatementatthe[editvlansvlan-nameforwarding-optionsdhcp-securitygroupgroup-name]hierarchylevel.
TomonitorandmanipulatetheDHCPsnoopingdatabase,ARPinspectionstatistics,andIPsourceguardstatistics,issuethefollowingoperationalcommands:Copyright2013,JuniperNetworks,Inc.
8EXSeriesSwitchesReleaseNotesshowdhcp-securitybindingcleardhcp-securitybindingshowdhcp-securityarpinspectionstatisticscleararpclearinterfacesstatisticsallRTGsupport—Supportforredundanttrunkgroups(RTGs),whichprovideredundancyincasesoflinkorlinecardfailures.
RTGsareconfiguredatthe[editswitch-optionsredundant-trunk-groupgroupgroup-name]hierarchylevel.
sFlowmonitoringtechnologyandLLDP-MED—Supportfor:sFlowtechnology,amonitoringtechnologyforhigh-speedswitchedorroutednetworks.
sFlowmonitoringtechnologyrandomlysamplesnetworkpacketsandsendsthesamplestoamonitoringstation.
YoucanconfiguresFlowtechnologytocontinuouslymonitortrafficatwirespeedonallinterfacessimultaneously.
ThesFlowtechnologyisconfiguredatthe[editprotocolssflow]hierarchylevel.
LinkLayerDiscoveryProtocol–MediaEndpointDiscovery(LLDP-MED)tolearnanddistributedeviceinformationonnetworklinks.
Theinformationallowstheswitchtoquicklyidentifyavarietyofdevices,resultinginaLANthatinteroperatessmoothlyandefficiently,exchanginginformationrelatedtoVoIPVLAN,endpointlocation,andpowercapabilitiesbetweentheswitchandtheIPtelephone.
LLDP-MEDisconfiguredatthe[editprotocolslldp-med]hierarchylevel.
Spanning-treeprotocols—Supportforspanning-treeprotocolversionsthatenableyoutocreatealoop-freetopologyinLayer2networks:TheoriginalSpanningTreeProtocol(STP),whichisdefinedintheIEEE802.
1D1998specification.
RapidSpanningTreeProtocol(RSTP),whichwasoriginallydefinedintheIEEE802.
1wdraftspecification.
RSTPprovidesfasterreconvergencetimethantheoriginalSTPbyidentifyingcertainlinksaspointtopointandbyusingprotocolhandshakemessagesratherthanfixedtimeouts.
MultipleSpanningTreeProtocol(MSTP),whichwasoriginallydefinedintheIEEE802.
1sdraftspecificationandlaterincorporatedintotheIEEE802.
1Q-2003specification.
MSTPprovidesthecapabilitytologicallydivideaLayer2networkintoregions.
Everyregionhasauniqueidentifierandcancontainmultipleinstancesofspanningtrees.
VLANSpanningTreeProtocol(VSTP),whichiscompatiblewiththePer-VLANSpanningTreePlus(PVST+)andRapid-PVST+protocolssupportedoncertainvendors'routersandswitches.
VSTPmaintainsaseparatespanning-treeinstanceforeachVLAN.
DifferentVLANscanusedifferentspanning-treepaths.
Bydefault,RSTPisenabledontheswitch.
YoucanconfigureoptionsforRSTPatthe[editprotocolsrstp]hierarchylevel.
YoucanenableandconfigureoptionsforMSTPorVSTPatthe[editprotocols(mstp|vstp)]hierarchylevel,respectively.
For9Copyright2013,JuniperNetworks,Inc.
NewFeaturesinJunosOSRelease13.
2X50forEXSeriesSwitchescompatibilitywithdevicesthatdonotsupportRSTPorVSTP,includetheforce-versionstpstatementatthe[editprotocols(rstp|vstp)]hierarchyleveltoenablexSTP.
AdditionalHardwareInadditiontoEX4300switchhardware,thefollowinghardwareisintroducedinRelease13.
2X50-D10:SFP+MediaAccessControlSecurity(MACsec)uplinkmodule—TheSFP+MACsecuplinkmoduleisnowavailable.
YoucaninstalltheSFP+MACsecuplinkmoduleinEX4200switchestoprovidetheswitchwithMACsec-capableports.
YoucanconfiguretheSFP+MACsecmoduletosupportuptofourMACsec-capable1-gigabitsmallform-factorpluggable(SFP)transceiversoruptotwoMACsec-capable10-gigabitsmallform-factorpluggable(SFP+)transceivers.
EX45502X40-GbQSFP+expansionmodule—Youcaninstalluptotwo2X40-GbQSFP+optionalexpansionmodulesinanEX4550switch.
EachexpansionmoduleprovidestwoQSFP+portsforinstalling40-gigabitQSFP+transceivers.
ThefollowingopticsaresupportedontheEX45502X40-GbQSFP+expansionmodule:EX-QSFP-40GE-SR4EX-QSFP-40GE-DAC-1MEX-QSFP-40GE-DAC-3M48-portSFPlinecardforEX6200switches—The48-portSFPlinecardforEX6200switches(EX6200-48F)comprises:48100-gigabitor1000-gigabitsmallform-factor(SFP)portsLinecardLEDsNetworkportLEDsThelinecardsinEX6200switchescombineaPacketForwardingEngineandEthernetinterfacesonasingleassembly.
Theyarefield-replaceableunits(FRUs)thatcanbeinstalledinthelinecardslotsonthefrontoftheswitchchassis.
Thelinecardsarehot-insertableandhot-removable.
ThefollowingopticsaresupportedonEX6200-48Flinecards:EX-SFP-GE10KT13R15EX-SFP-GE10KT15R13EX-SFP-GE10KT13R14EX-SFP-GE10KT14R13EX-SFP-GE40KT13R15EX-SFP-GE40KT15R13EX-SFP-FE20KT13R15EX-SFP-FE20KT15R13Copyright2013,JuniperNetworks,Inc.
10EXSeriesSwitchesReleaseNotesManagementandRMONRFC4293EXSeriesswitchsupport—MandatoryMIBs(system-widestatistics)aresupportedonEXSeriesswitches.
TheJ-WebinterfacesupportsEX4300switches.
RelatedDocumentationChangesinDefaultBehaviorandSyntaxinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage11ChangestoandErratainDocumentationforJunosOSRelease13.
2X50forEXSeriesSwitchesonpage29LimitationsinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage11OutstandingIssuesinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage17ResolvedIssuesinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage25UpgradeandDowngradeInstructionsforJunosOSRelease13.
2X50forEXSeriesSwitchesonpage29ChangesinDefaultBehaviorandSyntaxinJunosOSRelease13.
2X50forEXSeriesSwitchesTherearenochangesindefaultbehaviorandsyntaxinJunosOSRelease13.
2X50forEXSeriesswitches.
RelatedDocumentationNewFeaturesinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage3ChangestoandErratainDocumentationforJunosOSRelease13.
2X50forEXSeriesSwitchesonpage29LimitationsinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage11OutstandingIssuesinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage17ResolvedIssuesinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage25UpgradeandDowngradeInstructionsforJunosOSRelease13.
2X50forEXSeriesSwitchesonpage29LimitationsinJunosOSRelease13.
2X50forEXSeriesSwitchesThissectionliststhelimitationsinJunosOSRelease13.
2X50forEXSeriesswitches.
Ifthelimitationisassociatedwithaniteminourbugdatabase,thedescriptionisfollowedbythebugtrackingnumber.
ForthemostcompleteandlatestinformationaboutknownJunosOSdefects,usetheJuniperonlineJunosProblemReportSearchapplication.
11Copyright2013,JuniperNetworks,Inc.
ChangesinDefaultBehaviorandSyntaxinJunosOSRelease13.
2X50forEXSeriesSwitchesEthernetSwitchingandSpanningTreesOnEX4300switches,theSTPstateofaninactivelogicalinterfaceinaredundanttrunkgroup(RTG)mightbeincorrectlyshownasforwardinginshowethernet-switchinginterfacecommandoutput.
[PR/890442:Thisisaknownsoftwarelimitation.
]FirewallFiltersOnEX3200andEX4200switches,whenaverylargenumberoffirewallfiltersareincludedintheconfiguration,itmighttakealongtime,possiblyafewminutes,fortheegressfilterrulestobeinstalled.
[PR/468806:Thisisaknownsoftwarelimitation.
]OnEX3300switches,ifyouaddanddeletefilterswithalargenumberofterms(ontheorderof1000ormore)inthesamecommitoperation,notallthefiltersareinstalled.
Asaworkaround,addfiltersinonecommitoperation,anddeletefiltersinaseparatecommitoperation.
[PR/581982:Thisisaknownsoftwarelimitation.
]OnEX8200switches,ifyouconfigureanimplicitorexplicitdiscardactionasthelastterminanIPv6firewallfilteronaloopback(lo0)interface,allthecontroltrafficfromtheloopbackinterfaceisdropped.
Topreventthisdroppedcontroltraffic,youmustconfigureanexplicitacceptaction.
[Thisisaknownsoftwarelimitation.
]OnEX4300switches,egressVLAN-basedfirewallfilterrulesandegressrouter-basedfirewallfilterrulesonIRBinterfaceshaveduplicateentriestomatchtaggedanduntaggedtraffic.
[PR/802206:Thisisaknownsoftwarelimitation.
]OnEX4300switches,thesource-addressipv6-addressmatchconditionisnotsupportedonegressrouter-basedfirewallfilters.
[PR/824953:Thisisaknownsoftwarelimitation.
]OnEX4300switches,theforwarding-classandloss-prioritymatch-conditionactionmodifiersarenotsupportedonegressfirewallfilters.
[PR/840082:Thisisaknownsoftwarelimitation.
]HardwareOn40-portSFP+linecardsforEX8200switches,theLEDsontheleftofthenetworkportsdonotblinktoindicatethatthereislinkactivityifyousetthespeedofthenetworkportsto10/100/1000Mbps.
However,ifyousetthespeedto10Gbps,theLEDsblink.
[PR/502178:Thisisaknownlimitation.
]TheUplinkModulesinEX3200SwitchestopicnotesthefollowingbehaviorfortheSFPuplinkmodule,whichprovidesfourportsfor1-gigabitsmallform-factorpluggable(SFP)transceivers:"OnanEX3200switch,ifyouinstallatransceiverinanSFPuplinkmodule,acorrespondingnetworkportfromthelastfourbuilt-inportsisdisabled.
Forexample,ifyouinstallanSFPtransceiverinport2ontheuplinkmodule(ge-0/1/2)on24-portmodels,thenge-0/0/22isdisabled.
Thedisabledportisnotlistedintheoutputofshowinterfacecommands.
"AnothernoteonthesamepagedescribessimilarbehavioroftheSFP+uplinkmodule:"OnanEX3200switch,ifyouinstallatransceiverinanSFP+uplinkmodulewhentheuplinkmoduleisoperatinginthe1-gigabitmode,acorrespondingnetworkportfromthelastfourbuilt-inportsisdisabled.
Forexample,ifyouinstallanSFPtransceiverinCopyright2013,JuniperNetworks,Inc.
12EXSeriesSwitchesReleaseNotesport2ontheuplinkmodule(ge-0/1/2),thenge-0/0/22isdisabled.
Thedisabledportisnotlistedintheoutputofshowinterfacescommands.
"However,inbothcaseswhatactuallyoccursisthatwhenyouinstalltheSFPuplinkmoduleorexplicitlyconfigurethemodeonanSFP+uplinkmoduleto1-gigabitoperatingmodeanddonotreboottheswitch,thelastfourbuilt-inportsontheswitcharedisabled.
Iftransceiversareinstalledintheuplinkmoduleports,thecorrespondingbuilt-innetworkportsarenotdisplayedintheoutputofshowinterfacescommands.
Theworkaroundistomoveallfourlinkstotheuplinkmodule,ortoreboottheswitchforcorrectinitializationoftheports.
[PR/686467:Thisisaknownlimitation.
]YoucannotconnectEX2200-12Pswitchestosomevendors'prestandardIPphoneswithastraightcable.
Asaworkaround,useacrossovercable.
[PR/726929:Thisisaknownlimitation.
]HighAvailabilityYoucannotverifythatnonstopbridging(NSB)issynchronizingLayer2protocolinformationwiththebackupRoutingEngineevenwhenNSBisproperlyconfigured.
[PR/701495:Thisisaknownsoftwarelimitation.
]OnEXSeriesVirtualChassisusingnonstopsoftwareupgrade(NSSU)toupgradefromJunosOSRelease11.
2orearliertoJunosOSRelease11.
3orlater,aftertheNSSUoperationfinishes,thesameMACaddressmightbeassignedtomultipleLayer2oraggregatedEthernetinterfacesondifferentmemberswitcheswithintheVirtualChassis.
TosetallLayer2andaggregatedEthernetportstohaveuniqueMACaddresses,reboottheVirtualChassisaftertheupgradeoperation.
ToavoidtheseMACaddressassignmentissues,upgradetoJunosOSRelease11.
3orlaterwithoutperforminganNSSUoperation.
UniqueMACaddressassignmentforLayer2andaggregatedEthernetinterfacesinaVirtualChassiswasintroducedinJunosOSRelease11.
3.
IfyouareupgradingtoJunosOSRelease11.
2orearlier,youshouldexpecttoseethesameMACaddressassignedtomultipleportsondifferentmemberswitcheswithintheVirtualChassis.
[PR/775203:Thisisaknownsoftwarelimitation.
]InfrastructureDonotusenonstopsoftwareupgrade(NSSU)toupgradethesoftwareonanEX8200switchfromJunosOSRelease10.
4toRelease11.
1orlaterifyouhaveconfiguredthePIM,IGMP,orMLDprotocolsontheswitch.
IfyouattempttouseNSSU,yourswitchmightbeleftinanonfunctionalstatefromwhichitisdifficulttorecover.
Ifyouhavethesemulticastprotocolsconfigured,usetherequestsystemsoftwareaddcommandtoupgradethesoftwareonanEX8200switchfromJunosOSRelease10.
4toRelease11.
1orlater.
[Thisisaknownsoftwarelimitation.
]OnEXSeriesswitches,theshowsnmpmibwalketherMIBcommanddoesnotdisplayanyoutput,eventhoughtheetherMIBissupported.
Thisoccursbecausethevaluesarenotpopulatedatthemodulelevel—theyarepopulatedatthetablelevelonly.
Youcanissueshowsnmpmibwalkdot3StatsTable,showsnmpmibwalkdot3PauseTable,13Copyright2013,JuniperNetworks,Inc.
LimitationsinJunosOSRelease13.
2X50forEXSeriesSwitchesandshowsnmpmibwalkdot3ControlTablecommandstodisplaytheoutputatthetablelevel.
[Thisisaknownsoftwarelimitation.
]Momentarylossofaninter-RoutingEngineIPCmessagemighttriggeranalarmthatdisplaysthemessageLossofcommunicationwithBackupRE.
However,nofunctionalityisaffected.
[PR/477943:Thisisaknownsoftwarelimitation.
]Routingbetweenvirtual-routinginstancesforlocaldirectroutesisnotsupported.
[PR/490932:Thisisaknownsoftwarelimitation.
]OnEX4500switches,themaintenancemenuisnotdisabledevenifyouincludethelcdmaintenance-menudisablestatementintheconfiguration.
[PR/551546:Thisisaknownsoftwarelimitation.
]Whenyouenablethefilter-idattributeontheRADIUSserverforaparticularclient,noneoftherequired802.
1XauthenticationrulesareinstalledintheIPv6database.
Therefore,IPv6trafficontheauthenticatedinterfaceisnotfiltered;onlyIPv4trafficisfilteredonthatinterface.
[PR/560381:Thisisaknownsoftwarelimitation.
]OnEX8200switches,ifOAMlinkfaultmanagement(LFM)isconfiguredonamemberofaVLANonwhichQ-in-Qtunnelingisalsoenabled,OAMPDUscannotbetransmittedtotheRoutingEngine.
[PR/583053:Thisisaknownsoftwarelimitation.
]Whenyoureconfigurethemaximumtransmissionunit(MTU)valueofanexthopmorethaneighttimeswithoutrestartingtheswitch,theinterfaceusesthemaximumvalueoftheeightpreviouslyconfiguredvaluesasthenextMTUvalue.
[PR/590106:Thisisaknownsoftwarelimitation.
]OnEX8208andEX8216switchesthathavetwoRoutingEngines,oneRoutingEnginecannotberunningJunosOSRelease10.
4orlaterwhiletheotheroneisrunningRelease10.
3orearlier.
EnsurethatbothRoutingEnginesinasingleswitchruneitherRelease10.
4orlaterorRelease10.
3orearlier.
[PR/604378:Thisisaknownsoftwarelimitation.
]InterfacesEXSeriesswitchesdonotsupportIPv6interfacestatistics.
Therefore,allvaluesintheoutputoftheshowsnmpmibwalkipv6IfStatsTablecommandalwaysdisplayacountof0.
[PR/480651:Thisisaknownsoftwarelimitation.
]OnEX8216switches,alinkmightgodownmomentarilywhenaninterfaceisaddedtoaLAG.
[PR/510176:Thisisaknownsoftwarelimitation.
]OnEXSeriesswitches,ifyouclearLAGinterfacestatisticswhiletheLAGisdown,thenbringuptheLAGandpasstrafficwithoutcheckingforstatistics,andfinallybringtheLAGinterfacedownandcheckinterfacestatisticsagain,thestatisticsmightbeinaccurate.
Asaworkaround,usetheshowinterfacesinterface-namecommandtocheckLAGinterfacestatisticsbeforebringingdowntheinterface.
[PR/542018:Thisisaknownsoftwarelimitation.
]Copyright2013,JuniperNetworks,Inc.
14EXSeriesSwitchesReleaseNotesJ-WebInterfaceIntheJ-Webinterface,youcannotcommitsomeconfigurationchangesinthePortsConfigurationpageortheVLANConfigurationpagebecauseofthefollowinglimitationsforport-mirroringportsandport-mirroringVLANs:AportconfiguredastheoutputportforananalyzercannotbeamemberofanyVLANotherthanthedefaultVLAN.
AVLANconfiguredtoreceiveanalyzeroutputcanbeassociatedwithonlyoneinterface.
[PR/400814:Thisisaknownsoftwarelimitation.
]IntheJ-Webinterface,theEthernetSwitchingMonitorpage(Monitor>Switching>EthernetSwitching)mightnotdisplaymonitoringdetailsiftheswitchhasmorethan13,000MACentries.
[PR/425693:Thisisaknownsoftwarelimitation.
]IfyouinsertfourormoreEX8200-40XSlinecardsinanEX8208orEX8216switch,theSupportInformationpage(Maintain>CustomerSupport>SupportInformation)intheJ-Webinterfacemightfailtoloadbecausetheconfigurationmightbelargerthanthemaximumsizeof5MB.
TheerrormessagethatappearsisConfigurationtoolargetohandle.
[PR/552549:Thisisaknownsoftwarelimitation.
]TheJ-Webinterfacedoesnotsupportrole-basedaccesscontrol;itsupportsonlyusersinthesuper-userauthorizationclass.
Soauserwhoisnotinthesuper-userclass,suchasauserwithview-onlypermission,isabletolaunchtheJ-Webinterfaceandisallowedtoconfigureeverything,buttheconfigurationfailsontheswitch,andtheswitchdisplaysaccesspermissionerrors.
[PR/604595:Thisisaknownsoftwarelimitation.
]InmixedEX4200andEX4500VirtualChassis,theJ-WebinterfacedoesnotlistfeaturessupportedbythebackuporlinecardmembersoftheVirtualChassis.
Instead,itlistsonlythefeaturessupportedbythemaster.
[PR/707671:Thisisaknownsoftwarelimitation.
]Layer2andLayer3ProtocolsOnEX3200andEX4200switches,MPLSisnotsupportedonLayer3taggedsubinterfacesandroutedVLANinterfaces(RVIs)eventhoughtheCLIallowsyoutocommitaconfigurationthatenablesthesefeatures.
[PR/612434:Thisisaknownsoftwarelimitation.
]OnEX4300switches,forthepacket-actionstatementatthe[editvlansvlan-nameswitch-optionsinterfaceinterface-nameinterface-mac-limit]hierarchylevel,thelog,none,andshutdownoptionsappearintheCLI,buttheydonotwork(youcannotcommittheseoptions).
[Thisisaknownsoftwarelimitation.
]ManagementandRMONOnEXSeriesswitches,anSNMPqueryfailswhentheSNMPindexsizeofatableisgreaterthan128bytes,becausetheNetSNMPtooldoesnotsupportSNMPindexsizesgreaterthan128bytes.
[PR/441789:Thisisaknownsoftwarelimitation.
]15Copyright2013,JuniperNetworks,Inc.
LimitationsinJunosOSRelease13.
2X50forEXSeriesSwitchesWhenMVRPisconfiguredonatrunkinterface,youcannotconfigureconnectivityfaultmanagement(CFM)onthatinterface.
[PR/540218:Thisisaknownsoftwarelimitation.
]Theconnectivityfaultmanagement(CFM)process(cfmd)mightcreateacorefile.
[PR/597302:Thisisaknownsoftwarelimitation.
]VirtualChassisAstandaloneEX4500switchonwhichthePICmodeissettovirtual-chassishaslessbandwidthavailablefornetworkportsthanastandaloneEX4500switchonwhichthePICmodeissettointraconnect.
ThenetworkportsonastandaloneEX4500switchthathasavirtual-chassisPICmodesettingoftendonotachieveline-rateperformance.
ThePICmodeonanEX4500switchmightbesettovirtual-chassisbecause:TheswitchwasorderedwithaVirtualChassismoduleinstalledandthushasitsPICmodesettovirtual-chassisbydefault.
Youenteredtherequestchassispic-modevirtual-chassisoperationalmodecommandtoconfiguretheswitchasamemberofaVirtualChassis.
TocheckthePICmodeforanEX4500switchthathasaVirtualChassismoduleinstalledinit,usetheshowchassispic-modecommand.
YoumustalwayssetthePICmodeonastandaloneEX4500switchtointraconnect.
SetthePICmodetointraconnectbyenteringtherequestchassispic-modeintraconnectoperationalmodecommand.
[Thisisaknownsoftwarelimitation.
]TheautomaticsoftwareupdatefeatureisnotsupportedonEX4500switchesthataremembersofaVirtualChassis.
[PR/541084:Thisisaknownsoftwarelimitation.
]WhenanEX4500switchbecomesamemberofaVirtualChassis,itisassignedamemberID.
IfthatmemberIDisanonzerovalue,thenifthatmemberswitchisdowngradedtoasoftwareimagethatdoesnotsupportVirtualChassis,youcannotchangethememberIDto0.
AstandaloneEX4500switchmusthaveamemberIDof0.
TheworkaroundistoconverttheEX4500VirtualChassismemberswitchtoastandaloneEX4500switchbeforedowngradingthesoftwaretoanearlierrelease,asfollows:1.
DisconnectallVirtualChassiscablesfromthemembertobedowngraded.
2.
ConvertthememberswitchtoastandaloneEX4500switchbyissuingtherequestvirtual-chassisreactivatecommand.
3.
RenumberthememberIDofthestandaloneswitchto0byissuingtherequestvirtual-chassisrenumbercommand.
4.
Downgradethesoftwaretotheearlierrelease.
[PR/547590:Thisisaknownsoftwarelimitation.
]WhenyouaddanewmemberswitchtoanEX4200VirtualChassis,EX4500VirtualChassis,ormixedEX4200andEX4500VirtualChassisinaringtopology,amemberswitchthatwasalreadypartoftheVirtualChassismightbecomenonoperationalforCopyright2013,JuniperNetworks,Inc.
16EXSeriesSwitchesReleaseNotesseveralseconds.
Thememberswitchreturnstotheoperationalstatewithnouserintervention.
Networktraffictothememberswitchisdroppedduringthedowntime.
Toavoidthisissue,followthisprocedure:1.
Cableonededicatedoruser-configuredVirtualChassisport(VCP)onthenewmemberswitchtotheexistingVirtualChassis.
2.
Poweronthenewmemberswitch.
3.
WaitforthenewswitchtobecomeoperationalintheVirtualChassis.
Monitortheshowvirtual-chassiscommandoutputtoconfirmthatthenewswitchisrecognizedbytheVirtualChassisandisinthePrsntstate.
4.
Cabletheotherdedicatedoruser-configuredVCPonthenewmemberswitchtotheVirtualChassis.
[PR/591404:Thisisaknownsoftwarelimitation.
]TherequestsystemscriptsaddcommanddoesnotinstalltheAI-ScriptsbundlepackageonallnodesofanEX8200VirtualChassis.
Asaworkaround,copythejaispackagetothe/var/tmpdirectoryofbothmasterandbackupXRE200ExternalRoutingEngines(member8andmember9)andinstallthepackageinalocalmemberforboth.
Inmember8:requestsystemscriptsadd/var/tmp/jais-3.
4R1.
1-signed.
tgzmember8Inmember9:requestsystemscriptsadd/var/tmp/jais-3.
4R1.
1-signed.
tgzmember9[PR/832975:Thisisaknownsoftwarelimitation.
]RelatedDocumentationNewFeaturesinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage3ChangesinDefaultBehaviorandSyntaxinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage11ChangestoandErratainDocumentationforJunosOSRelease13.
2X50forEXSeriesSwitchesonpage29OutstandingIssuesinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage17ResolvedIssuesinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage25UpgradeandDowngradeInstructionsforJunosOSRelease13.
2X50forEXSeriesSwitchesonpage29OutstandingIssuesinJunosOSRelease13.
2X50forEXSeriesSwitchesThefollowingareoutstandingissuesinJunosOSRelease13.
2X50forEXSeriesswitches.
Theidentifierfollowingthedescriptionisthetrackingnumberinourbugdatabase.
17Copyright2013,JuniperNetworks,Inc.
OutstandingIssuesinJunosOSRelease13.
2X50forEXSeriesSwitchesForthemostcompleteandlatestinformationaboutknownJunosOSdefects,usetheJuniperonlineJunosProblemReportSearchapplication.
AccessControlandPortSecurityClassofServiceEthernetSwitchingandSpanningTreesFirewallFiltersInfrastructureInterfacesJ-WebInterfaceManagementandRMONMulticastProtocolsSoftwareUpgradeandInstallationAccessControlandPortSecurityOnEX4300switches,afteryoucleartheEthernetswitchingtable,MACRADIUSauthenticatedsessionsarenotclearedifthetrafficiscontinuous.
[PR/833888]OnEX4300switches,movingMAC-RADIUSclientsacrossVLANsmightnotworkasexpected.
[PR/840104]OnEX4300switches,previouslylearnedMACaddressesmightnotbeflushedfromtheEthernet-switchingtableinthesecases:Ifyouchangethesupplicantmodeofan802.
1X-enabledinterfacefromsingletosingle-secureIfyouchangethesupplicantmodeofacaptive-portal-enabledinterfaceIfyouchangeacaptive-portal-enabledinterfacetoan802.
1X-enabledinterface[PR/848336,PR/850690,PR/852890]OnEX4300switches,theaction-shutdownstatementatthe[editethernet-switching-optionsstorm-control]hierarchylevelmightnotworkproperly.
[PR/858930]OnanEX4300VirtualChassis,clientsmightbeauthenticatedevenwhentheno-mac-learningstatementisconfigured.
[PR/862724]OnanEX4300VirtualChassis,afteryouissuetherestartl2-learningcommand,aninterfaceauthenticatedontheguestVLANmighthaveotherportVLANassociations.
[PR/866927]OnanEX4300VirtualChassis,ifalargenumberofclientshavebeenauthenticatedandthenyouissuethecleardot1xinterfacecommand,thesystemmightnotremoveallentriesfromtheEthernetswitchingtable.
[PR/867518]OnanEX4300VirtualChassis,aMAC-RADIUSuserandan802.
1XuserwiththesameMACmightbeauthenticatedontwo802.
1X-enabledinterfaces.
[PR/867959]Copyright2013,JuniperNetworks,Inc.
18EXSeriesSwitchesReleaseNotesOnanEX4300VirtualChassis,afteryoudisableandenableadynamicVLANuser-authenticatedinterface,dynamicVLANassociationwith802.
1Xmightnotworkasexpected.
[PR/867994]OnEX4300switches,ifaPCisconnectedtotheswitchthroughacaptive-portal-enabledinterfaceandyoumovethatinterfacefromoneVLANtoanotherVLAN,thePCmightnotbeabletoobtainanIPaddressthroughDHCP.
[PR/868140]OnanEX4300VirtualChassis,networkpolicyTypeLengthValue(TLV)messagesarenotsentoutafteran802.
1X(dot1x)configurationisdeletedfromaVoIP-enabledinterface.
[PR/868840]OnanEX4300VirtualChassis,whenalargenumberofdynamicVLANusersareauthenticatedonmultipleinterfaces,dynamicVLANassociationsarenotremovedevenafterallauthenticated802.
1Xsessionshavecleared.
[PR/881777]OnanEX4300VirtualChassis,afterclientshavebeenauthenticatedandthenyourebootthel2-learningprocess,theVLANonwhichtheclientswereoriginallyauthenticatedmightbefloodedbeforeauthentication.
[PR/877854]OnEX4300switches,deactivatingcaptive-portalconfigurationonaninterfacemightclear802.
1Xclients'authenticatedsessionsonthesameinterfacewithafallbackconfigurationandviceversa.
[PR/878361]OnEX4300switches,with802.
1XandMACRADIUSenabledonaninterfaceandsuccessfulMAC-RADIUSauthenticationonthatinterfacewithassignmenttoadynamicVLAN,ifyoudisabletheinterfaceandthenreenableit,theMAC-RADIUSclientisauthenticated,buttheMACaddressoftheclientisnotlearnedintheEthernetswitchingtable.
[PR/880077]OnEX4300switches,afteryouhaveenabled802.
1Xonaninterfaceandaclienthasbeenauthenticatedthroughbypassauthentication,ifyouthencleartheauthenticated802.
1Xsessionsonthatinterface,theMACaddressfortheclientisnotremovedfromtheEthernetswitchingtable.
[PR/880804]OnEX4300switches,whenscalingupto10,000clients,theswitchmightcreateadot1xcorefile.
[PR/886279]OnEX4300switches,afteraMAC-RADIUSclienthasbeenauthenticatedonaninterfaceandthenthedeleteprotocolscommandisexecuted,incomingtrafficmightbedroppedfromthatinterface.
[PR/886316]OnEX4300switches,dynamicVoIPVLANsmightnotwork.
[PR/895188]OnEX4300switches,afteraclientthathasbeenauthenticatedonaninterfacesendsalogoffmessage,theVoIPVLANbindingonthatinterfacemightbedropped.
[PR/896091]OnEX4300switches,anunsuccessfulDHCPrequestmightresultinastalesnoopingentryintheDHCPsnoopingtable.
[PR/896751]OnEX4300switches,ifaclientisauthenticatedinsingle-supplicantmodeonaninterfacethatis802.
1X-enabled,thatinterfaceisassigneddynamicallytoaVoIPVLAN,andthenthatclientlogsoff,theVoIPVLANbindingforthatinterfacemightbedropped.
[PR/897684]19Copyright2013,JuniperNetworks,Inc.
OutstandingIssuesinJunosOSRelease13.
2X50forEXSeriesSwitchesOnEX4300switches,ifanaccessinterfaceisconfiguredinbothadataVLANandaVoIPVLAN,thenifIPsourceguardisenabledonthedataVLAN,trafficontheVoIPVLANmightbeaffected.
Asaworkaround,enableIPsourceguardonboththedataVLANandtheVoIPVLAN.
[PR/898192]OnEX4300switches,ifpersistentDHCPsnoopingisconfigured,thesnoopingentriesarewrittentotheconfiguredfile.
Ifyouthenreboottheswitch,theDHCPsnoopentriesareretrievedinthecontrolplane.
TheentriesmightnotbepresentinthekernelandthePacketForwardingEngine,andthatfactaffectsDAIandIPsourceguardifthosefeaturesareconfigured.
[PR/900238].
ClassofServiceOnEXSeriesswitches,EXPCoSclassificationdoesnotoccurifyoudeleteEXPCoSclassifiersandthenaddthemback.
[PR/848273]OnEX4300switches,afteryouconfigureafixedclassifieronaLayer2interface,thendeletetheclassifier,andthenexecuteaconfigurationrollbackoperation,theclassifierdoesnottakeeffectontheegressLayer2interface.
[PR/892473]OnEX4300switches,youcanconfigurerewriterulesonlyattheportlevelandnotatthesub-interfacelevel.
[PR/806487]EthernetSwitchingandSpanningTreesWhenconfiguringxSTPonEX4300switches,youmustaddalltheinterfacesintheappliedVLANsinconfigurations.
ForMSTP,configureallinterfacesinallVLANsatthe[editprotocolsmstpinterface]hierarchylevel.
[PR/860226]OnanEX4300VirtualChassis,wheninterface-mac-limitisconfigured,theswitchmightnotbeabletodifferentiatethesameportnumberontwodifferentVirtualChassismemberswhiletheswitchiscountingMACs.
Forexample,ifge-0/0/0andge-1/0/0areconfiguredwithaninterface-mac-limitvalueof2,andifonlyge-0/0/0isconfiguredwiththepacketactiondrop,ifge-1/0/0learnstwoMACs,thentrafficfromge-0/0/0isdropped.
[PR/900283]FirewallFiltersOnEX4300switches,Layer3andLayer4matchconditionsarenotsupportedonegressport-basedfirewallfiltersoregressVLAN-basedfirewallfilters.
[PR/816888]OnEX4300switches,thefrominterfaceinterface-namematchconditionisnotsupportedonegressfirewallfilters.
[PR/819979]InfrastructureOnEX4300switches,ifyoucreatemorethanoneEthernetringprotection(ERP)instanceonthesameinterface,trafficonthatinterfacemightbelost.
[PR/815700]OnEX4300switches,ifyoucreateanEthernetringprotection(ERP)instancewithaspecifiedcontrolVLAN,andthencreateadataVLANforthesameERPinstance,trafficmightbelost.
[PR/816517]Copyright2013,JuniperNetworks,Inc.
20EXSeriesSwitchesReleaseNotesOnEX4300switches,Ethernetringprotection(ERP)failsifthecontrolVLANisreplacedwithanotherVLANatruntime.
[PR/817456]OnanEX4300VirtualChassis,thedevicecontrolprocess(dcd)createscorefileswhenmastershipisswitchedovertoanotherRoutingEngine.
[PR/818726]OnanEX4300VirtualChassis,MAClearningandARPresolutionmightfailamonginterfacesinaVLANthatareconnectedtothebackupwhenVSTPisenabledonsomeVLANsandnotonothers.
Asaworkaround,bringtheaffectedinterfacesdownandthenupagain.
[PR/822708]OnEX4300switches,trafficmightcontinuetoberoutedonanintegratedroutingandbridging(IRB)interfaceevenaftertheinterfaceisdisabled.
[PR/831484]OnEX4300switchesandEX4300VirtualChassis,ICMPpingpacketswithsizesexceedingtheconfiguredMTUontheinterfacemightbeallowedtopass,whereasdatapacketswithsizesexceedingtheconfiguredMTUontheinterface,forexample,uptoMTU+12,areallowedtoegress.
[PR/832358]OnEX4300switches,interfacesarenotmarkedasm-routerinterfaceswhentheyareconnectedtoamulticastrouterthatisnotanIGMPquerier.
[PR/832877]OnanEX4300VirtualChassis,anSNMPMIBwalkforthejnxAnalyzerMIBdoesnotproduceanyoutput.
[PR/840835]OnEX4300switchesandEX4300VirtualChassis,maintenanceintermediatepoint(MIP)functionalitymightnotworkproperly.
[PR/842780]OnEX4300switchesandEX4300VirtualChassis,ifyouconfiguremorethan512VSTPinstances,theswitchmightcreateacorefile.
[PR/848278]OnEX4300switches,ifyouchangeVLANconfigurationsbyusingtheloadoverrideconfig-filecommands,thesystemmightcreateacorefile.
[PR/849522]OnEX4300switchesandEX4300VirtualChassis,whenVirtualRouterRedundancyProtocol(VRRP)isenabledonalogicalinterfaceonwhichproxyARPisenabled,theswitchmightreplywiththeVRRP'sMACaddressinsteadoftheintegratedroutingandbridging(IRB)MACaddress.
[PR/849664]OnEX4300switchesandEX4300VirtualChassis,whenanInternetGroupManagementProtocol(IGMP)leavemessageissent,themulticastgroupmightnotbeclearedfromtheIPmulticast(IPMC)table.
[PR/853369]OnanEX4300VirtualChassis,configuringandthenremovingtheconfigurationforIGMPsnoopingmultipletimesmightcreateaVMcorefile.
[PR/853988]OnanEX4300VirtualChassisthatissendingLayer3multicasttraffic,thesystemmightcreateaperiodicpacketmanagementprocess(ppmd)corefile.
[PR/854630]OnanEX4300VirtualChassis,afteryouenableandthendisablepersistentlearningonaninterface,thenumberofentriesintheEthernetswitchingtablemightbetwicetheactualcount.
[PR/854673]OnanEX4300VirtualChassis,ifyouissuetheclearspanning-treestatisticsinterfacecommand,thesystemmightcreateaLayer2ControlProtocolprocess(l2cpd)corefile.
[PR/854972]21Copyright2013,JuniperNetworks,Inc.
OutstandingIssuesinJunosOSRelease13.
2X50forEXSeriesSwitchesOnanEX4300VirtualChassis,ifyouissuetheclearethernet-switchingrecovery-timeoutcommand,thesystemdisplaystheerrormessageerror:timeoutcommunicatingwithl2-learningdaemon.
[PR/856639]OnEX4300switches,whenIGMPsnoopingisenabledandanewinterfaceisaddedtoaVLAN,packetlossoccursontheinterfaceconfiguredasthemulticastreceiverintheVLAN.
[PR/858197]EX4300switchesmightcontinuouslydroppacketswhentheyhavetoforwardthepacketsoverECMPbasedonintegratedroutingandbridging(IRB)interfaces,ifthenext-hopaddressesarereachedthroughdifferentunderlyingLayer2logicalinterfaces.
[PR/858509]OnEX4300switches,ifyouissuethecommandclearinterfacesstatisticsallorclearinterfacesstatisticsinterface-name,theARPinspectionstatisticsarenotcleared.
[PR/858517]OnEX4300switchesandEX4300VirtualChassis,afteragracefulRoutingEngineswitchover(GRES),spanning-treeprotocolstatisticsmightnotbedistributed.
[PR/858542]OnEX4300switchesandEX4300VirtualChassis,thesystemmightcreateamulticastsnoopingprocess(mcsnoopd)corefile.
[PR/859009]AfterachangeismadeintheMSTPtopologyofaconnectedswitch,anEX4300VirtualChassismightnotdisplayARPpacketsintheoutputoftheshowsystemstatisticsarpcommand.
[PR/859494]Insomeconditions,akernelpanicoccursonanEX4300switch,andthedevicestaysindb>mode.
[PR/860338]OnEX4300switchesandEX4300VirtualChassis,unicastpacketsthatareroutedonaunicastreversepathforwarding(RPF)-enabledequal-costmultipath(ECMP)pathmightbedroppedwhenoneoftheotherECMPpathsthroughwhichtrafficisnotgettingroutedgoesdown.
[PR/860426]OnanEX4300VirtualChassis,forwardingmightbedelayedandthecountoffloodedpacketsmightnotbethesameasthecountoftransmittedpackets.
[PR/863481]OnanEX4300VirtualChassis,theaction-shutdownconfigurationforstormcontroldoesnottakeeffect,eventhoughstormcontrolisworkingasconfiguredandthetrafficstormiscontained.
Whentrafficexceedstheconfiguredlimit,theinterfacedoesnotshutdown;instead,thetrafficisrate-limited.
[PR/865700]OnEX4300switchesandEX4300VirtualChassis,whenyourestarttheroutingprocess,theperiodicpacketmanagementprocess(ppmd)mightcreateacorefile.
[PR/866173]OnanEX4300VirtualChassis,OAMconnectivityfaultmanagement(CFM)sessionsmightnotformonLAGmemberlinksafterasystemreboot.
[PR/867590]OnEX4300switches,theuplinkfailuredetection(UFD)processcreatescorefileswhenchangesaremadetotheUFDconfigurationgroups.
[PR/869121]OnanEX4300VirtualChassis,whenthepacketforwardingprocess(pfem)isrestartedonaswitchwithuplinkfailuredetection(UFD)groupsconfigured,thedevicecontrolprocess(dcd)createscorefiles.
[PR/873974]Copyright2013,JuniperNetworks,Inc.
22EXSeriesSwitchesReleaseNotesIf802.
1XisenabledonanEX4300VirtualChassisandyoureboottheVirtualChassis,adot1xcorefilemightbecreated.
[PR/881092]OnanEX4300VirtualChassis,ifyourebootthemasterswitchorrunagracefulRoutingEngineswitchover(GRES),theperiodicpacketmanagementprocess(ppmd)mightcreateacorefile.
[PR/887431]Onathree-memberEX4300VirtualChassis,ifagracefulRoutingEngine(GRES)switchoveroccurs,thesystemmightcreatecorefilesonthemasterandbackupmembers.
[PR/888486]InamixedmodeVirtualChassishavingEX4200andEX4500switches,loadingtheJunosOSimageusingtherequestsystemsoftwareaddsetcommandfails,andthefollowingerrormessageisdisplayed:invaliduseofmultiplepackagenamesorfiles.
Asaworkaround,installtheJunosOSimageoneachmemberintheVirtualChassis,onememberatatime,usingthecommandrequestsystemsoftwareaddpackagemembermember-id.
[PR/874239]OnanEX4300switch,packetswithregisteredmulticastMACsarerate-limitedeventhoughstormcontrolisdisabledforregisteredmulticast.
[PR/891348]OnanEX4300VirtualChassis,whenyourebootthemasterswitch,themasterswitchregainsmastership,butthechassiscontrolsubsystemmightnotstart.
[PR/891832]OnanEX4300switch,whenyouissuethesetprotocolsdot1xauthenticatorinterfaceallcommand,acommiterrorappears.
[PR/892082]OnanEX4300switch,whenyouremoveandthenreinserta10-gigabitDACcableintoanuplinkport,apfexcorefilemightbecreated.
[PR/893483]OnEX4300switches,dynamicARPinspectionandVLANfirewallfiltersdonotworkiftheyareappliedsimultaneouslyonthesameVLAN.
[PR/900579]OnEX4300switches,stormcontroldefaultratelimitingmightnotoccuron40-gigabitportsandon10-gigabitports.
[PR/904937]InterfacesOnEXSeriesswitches,ifaninterfaceisamemberofaninterfacerangeandisnotalsoconfigureddirectlyatthe[editinterfacesinterface-name]hierarchylevel,theMTUvalueconfiguredwiththeinterfacerangemightnotbedeletedwhenyoudeletetheinterfacerangeconfiguration.
[PR/859160]J-WebInterfaceIfyouhaveaccessedtheJ-WebinterfaceusinganHTTPSconnectionthroughtheMicrosoftInternetExplorerWebbrowser,youmightnotbeabletodownloadandsavereportsfromsomepagesontheMonitor,Maintain,andTroubleshoottabs.
Someaffectedpagesareattheselocations:Maintain>Files>LogFiles>DownloadMaintain>ConfigManagement>HistoryMaintain>CustomerSupport>SupportInformation>GenerateReport23Copyright2013,JuniperNetworks,Inc.
OutstandingIssuesinJunosOSRelease13.
2X50forEXSeriesSwitchesTroubleshoot>TroubleshootPort>GenerateReportMonitor>EventsandAlarms>ViewEvents>GenerateReportMonitor>Routing>RouteInformation>GenerateReportAsaworkaround,usetheMozillaFirefoxWebbrowsertodownloadandsavereportsusinganHTTPSconnection.
[PR/566581]IntheJ-Webinterface,HTTPSaccessmightworkwithaninvalidcertificate.
Asaworkaround,afteryouchangethecertificate,issuetherestartweb-managementcommandtorestarttheJ-Webinterface.
[PR/700135]OnEX2200-Cswitches,ifyouhavechangedthemediatypeandcommittedthechange,thePortsconfigurationpage(Configure>Interfaces>Ports)mightnotlisttheuplinkport.
[PR/742847]AfteryouremoveorrebootaVirtualChassismember(eitherthebackuporamemberinthelinecardrole),whenyouclickothermembersintheJ-Webinterface,theChassisViewerforthosemembersmightnotexpand,andthedashboardmightlogthefollowingerror:stackImgisnullornotanobject.
Asaworkaround,manuallyrefreshthedashboard.
[PR/771415]OnEX8200VirtualChassis,whileusingtheVirtualChassisWizardintheJ-WebinterfaceintheMozillaFirefoxversion3.
xbrowser,ifyouhaveselectedmorethansixportpairsfromthesamemembertoconvertfromVCPstonetworkports,thewizardmightdisplayincorrectportconversionstatus.
Also,ifyoudouble-clickNextafterdeletinganactivememberintheMemberspage,theJ-Webinterfacemightstopresponding.
[PR/796584]OnEX4300switches,whenyoucommitaconfigurationusingEZSetup,ifthelaptopbecomesdisconnected,theJ-Webinterfacereportsthatthecommitoperationwassuccessfulregardlessofwhetherthecommitoperationactuallysucceeded.
[PR/866976]ManagementandRMONOnEX4200andEX4500switches,adaptivesamplingistriggeredoninterfacesconfiguredforsFlowmonitoringtechnologyeventhoughthesamplingrateislessthan300pps.
[PR/840858]MulticastProtocolsOnanEX4300switch,whenyouconfigureamulticastroute,multicasttrafficmightnotgoouttheegressinterface,andthemulticastrouteisnotinstalledinthePacketForwardingEngine.
[PR/894175]OnanEX4300switch,whenyouissuetheclearmulticastforwarding-cachecommand,aroutingprocess(rpd)corefilemightbecreated.
[PR/894522]Copyright2013,JuniperNetworks,Inc.
24EXSeriesSwitchesReleaseNotesSoftwareUpgradeandInstallationOnEX3300switches,anSFIDcorefilemightbecreatedwhenyouchangethesoftwareondownstreamswitches.
[PR/856455]RelatedDocumentationNewFeaturesinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage3ChangesinDefaultBehaviorandSyntaxinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage11ChangestoandErratainDocumentationforJunosOSRelease13.
2X50forEXSeriesSwitchesonpage29LimitationsinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage11ResolvedIssuesinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage25UpgradeandDowngradeInstructionsforJunosOSRelease13.
2X50forEXSeriesSwitchesonpage29ResolvedIssuesinJunosOSRelease13.
2X50forEXSeriesSwitchesThefollowingissueshavebeenresolvedinJunosOSRelease13.
2X50forEXSeriesswitches.
Theidentifierfollowingthedescriptionsisthetrackingnumberinourbugdatabase.
ForthemostcompleteandlatestinformationaboutknownJunosOSdefects,usetheJuniperonlineJunosProblemReportSearchapplication.
IssuesResolvedinRelease13.
2B1onpage25IssuesResolvedinRelease13.
2X50-D10onpage27IssuesResolvedinRelease13.
2B1ThefollowingissueshavebeenresolvedsinceJunosOSRelease12.
3R2.
Theidentifierfollowingthedescriptionisthetrackingnumberinourbugdatabase.
AccessControlandPortSecurityOnEXSeriesswitches,theLLDP-MEDmediaendpointclassisshownasinvalid.
Thisproblemisjustadisplayissue—thereisnofunctionalimpact.
[PR/840915:Thisissuehasbeenresolved.
]EthernetSwitchingandSpanningTreesForallEXSeriesswitchesexceptEX8200switches,hashindexcollisionswerecausingproblemswiththelearningofMACaddressesintheforwardingdatabase(FDB).
Youcannowincreasethemaximumnumberofsearchablehashindexesinincrementsof4,from4toamaximumof32entries,usingtheCLIcommandsetethernet-switching-optionsmax-lookup-length.
[PR/842439:Thisissuehasbeenresolved.
]25Copyright2013,JuniperNetworks,Inc.
ResolvedIssuesinJunosOSRelease13.
2X50forEXSeriesSwitchesOnanEX4200switchconfiguredforVLANtranslation,WindowsNetBIOStrafficmightnotbetranslated.
[PR/791131:Thisissuehasbeenresolved.
]IfanEXSeriesswitchhasaredundanttrunkgroup(RTG)link,aMACRefreshmessagemightbesentonanewactivelinkoftheRTGwhenRTGfailoveroccurs.
TheswitchsendstheRTGMACRefreshmessagewithaVLANtageventhoughRTGsareconfiguredonaccessports.
[PR/853911:Thisissuehasbeenresolved.
]FirewallFiltersOnEX2200,EX3200,EX3300,EX4200,EX4500,EX4550,andEX6210switches,afirewallfilterwithfamilysettoethernet-switchingandconfiguredforIPv4blocksspecifictransitIPv6trafficiftheether_typematchconditioninthefilterisnotexplicitlysettoipv4.
Asaworkaround,setether_typetoipv4inthefilter.
[PR/843336:Thisissuehasbeenresolved.
]HighAvailabilityOnEX8200switches,multiplerpdprocesscorefilesmightbecreatedonthebackupRoutingEngineafteranonstopsoftwareupgrade(NSSU)hasbeenperformedwhilemulticasttrafficisontheswitch.
[PR/841848:Thisissuehasbeenresolved.
]InfrastructureIfyoureboottheswitchwiththeroutedVLANinterface(RVI)disabled,thenevenifyoureenabletheRVI,theRVItrafficisnotroutedinthePacketForwardingEngine;thetrafficistrappedtotheCPUandispolicedbytheratelimitinthePacketForwardingEngine.
[PR/838581:Thisissuehasbeenresolved.
]OnEX8200switches,thecommitsynchronizecommandmightfailwiththeerrormessageerror:couldnotopenconfigurationdatabase(juniper.
data+).
[PR/844315:Thisissuehasbeenresolved.
]OnEXSeriesswitches,ifyouconfigureaphysicalinterface'smaximumtransmissionunit(MTU)withalargevalueandyoudonotreconfigurethefamilyinetMTU,OSPFpacketsthatarelargerthan1900bytesmightbedroppedwhentheyreachtheinternallogicalinterface.
AllcommunicationtrafficbetweenRoutingEnginesandbetweenFPCspassesthroughtheinternallogicalinterface.
TheOSPFneighbordoesnotreceivetheOSPFtransmissionsandendstheOSPFsession.
Theswitchdisplaystheerrormessagebmeb_rxfailed.
[PR/843583:Thisissuehasbeenresolved.
]Copyright2013,JuniperNetworks,Inc.
26EXSeriesSwitchesReleaseNotesLayer2andLayer3ProtocolsOnEXSeriesswitches,theCiscoDiscoveryProtocol(CDP)andtheVLANTrunkingProtocol(VTP)donotworkthroughLayer2protocoltunneling(L2PT).
[PR/842852:Thisissuehasbeenresolved.
]ManagementandRMONAnSNMPMIBwalkmightshowunwanteddatafornewlyaddedobjectssuchasjnxVirtualChassisPortInPktsorjnxVirtualChassisPortInOctets.
[PR/791848:Thisissuehasbeenresolved.
]OnEXSeriesswitches,aconfiguredOAMthresholdvaluemightberesetwhenthechassisisrebooted.
[PR/829649:Thisissuehasbeenresolved.
]TheSNMPqueryorwalkonipNetToMediaPhysAddressdoesnotmatchtheshowarpcommandoutput.
[PR/850051:Thisissuehasbeenresolved.
]OnEXSeriesswitches,theQ-BRIDGE-MIBOID1.
3.
6.
1.
2.
1.
17.
7reportstheVLANinternalindexinsteadoftheVLANID.
[PR/850299:Thisissuehasbeenresolved.
]SoftwareInstallationandUpgradeTheunlinkoptionintherequestsystemsoftwareaddpackage-nameunlinkcommanddoesnotworkonEXSeriesswitches.
[PR/739795:Thisissuehasbeenresolved.
]VirtualChassisOnEX2200VirtualChassis,whentherearemultipleequal-costpaths,theshowvirtual-chassisvc-pathsource-interfaceinterface-namedestination-interfaceinterface-namecommanddisplaysthefirstdiscoveredshortestpath,eventhoughtrafficmightbeflowingthroughanalternatepath.
[PR/829752:Thisissuehasbeenresolved.
]InamixedEX4200andEX4500VirtualChassis,linkaggregationmightcauseaPFEMcoreinsomememberswitches.
[PR/846498:Thisissuehasbeenresolved.
]OnEX4200VirtualChassis,CHASSISD_SNMP_TRAP6:SNMPtrapgenerated:Fan/BlowerRemovedmessagesmightbegeneratedperiodically,evenwhenmemberswitchescitedinthemessagesarenotpresentintheVirtualChassis.
[PR/858565:Thisissuehasbeenresolved.
]IssuesResolvedinRelease13.
2X50-D10ThefollowingissueshavebeenresolvedsinceJunosOSRelease13.
2B1.
Theidentifierfollowingthedescriptionisthetrackingnumberinourbugdatabase.
27Copyright2013,JuniperNetworks,Inc.
ResolvedIssuesinJunosOSRelease13.
2X50forEXSeriesSwitchesAccessControlandPortSecurityOnEXSeriesswitches,configurationofastaticLACPsystemIDisnotsupported.
[PR/889318:Thisissuehasbeenresolved.
]DeviceSecurityOnEX2200switches,stormcontroldoesnotlimittraffictothesetvaluewhenthattrafficentersthroughuplinkports;thetrafficislimitedat10timesthesetvalue.
[PR/879798:Thisissuehasbeenresolved.
]FirewallFiltersOnEX4200switches,anaggregatedEthernetinterfaceisnotsupportedasamatchconditioninafirewallfilter.
[PR/886476:Thisissuehasbeenresolved.
]HighAvailabilityOnEX8200VirtualChassis,anNSSUmightfail.
[PR/871288:Thisissuehasbeenresolved.
]InfrastructureOnEX8200VirtualChassis,adisabledRVImightsendgratuitousARPrequests.
[PR/848852:Thisissuehasbeenresolved.
]J-WebInterfaceOnEX2200switches,inthedashboardintheJ-Webinterface,theflashmemoryutilizationgraphmightshowanincorrectvalueof0percent.
Asaworkaround,toviewtheflashmemoryutilitization,clickMonitor>SystemView>SystemInformationandthenclicktheStorageMediatab.
[PR/823795:Thisissuehasbeenresolved.
]VirtualChassisIfyouunplugthemanagementcablefromthemasterswitchofanEX2200VirtualChassis,aremotesessionthroughthemanagementportislostevenifthebackupswitchhasamanagementcable.
[PR/882135:Thisissuehasbeenresolved.
]RelatedDocumentationNewFeaturesinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage3ChangesinDefaultBehaviorandSyntaxinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage11ChangestoandErratainDocumentationforJunosOSRelease13.
2X50forEXSeriesSwitchesonpage29LimitationsinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage11OutstandingIssuesinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage17Copyright2013,JuniperNetworks,Inc.
28EXSeriesSwitchesReleaseNotesUpgradeandDowngradeInstructionsforJunosOSRelease13.
2X50forEXSeriesSwitchesonpage29ChangestoandErratainDocumentationforJunosOSRelease13.
2X50forEXSeriesSwitchesChangestoJunosOSforEXSeriesSwitchesDocumentationonpage29Errataonpage29ChangestoJunosOSforEXSeriesSwitchesDocumentationNochangeshavebeenmadetothedocumentationforJunosOSRelease13.
2X50forEXSeriesswitchessinceitwaspublished.
ErrataTherearenooutstandingissueswiththepublisheddocumentationforJunosOSRelease13.
2X50forEXSeriesswitches.
RelatedDocumentationNewFeaturesinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage3ChangesinDefaultBehaviorandSyntaxinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage11LimitationsinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage11OutstandingIssuesinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage17ResolvedIssuesinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage25UpgradeandDowngradeInstructionsforJunosOSRelease13.
2X50forEXSeriesSwitchesonpage29UpgradeandDowngradeInstructionsforJunosOSRelease13.
2X50forEXSeriesSwitchesThissectiondiscussesthefollowingtopics:UpgradeandDowngradeSupportPolicyforJunosOSReleasesonpage29UpgradingtoJunosOSRelease12.
1R2orLaterwithExistingVSTPConfigurationsonpage30UpgradingfromJunosOSRelease10.
4R3orLateronpage30UpgradingfromJunosOSRelease10.
4R2orEarlieronpage32UpgradingfromJunosOSRelease12.
3orEarlieronpage32UpgradingEXSeriesSwitchesUsingNSSUonpage32UpgradeandDowngradeSupportPolicyforJunosOSReleasesSupportforupgradesanddowngradesthatspanmorethanthreeJunosOSreleasesatatimeisnotprovided,exceptforreleasesthataredesignatedasExtendedEnd-of-Life29Copyright2013,JuniperNetworks,Inc.
ChangestoandErratainDocumentationforJunosOSRelease13.
2X50forEXSeriesSwitches(EEOL)releases.
EEOLreleasesprovidedirectupgradeanddowngradepaths—youcanupgradedirectlyfromoneEEOLreleasetothenextEEOLreleaseeventhoughEEOLreleasesgenerallyoccurinincrementsbeyondthreereleases.
YoucanupgradeordowngradetotheEEOLreleasethatoccursdirectlybeforeorafterthecurrentlyinstalledEEOLrelease,ortotwoEEOLreleasesbeforeorafter.
Forexample,JunosOSReleases10.
0,10.
4,and11.
4areEEOLreleases.
YoucanupgradefromJunosOSRelease10.
0toRelease10.
4orevenfromJunosOSRelease10.
0toRelease11.
4.
However,youcannotupgradedirectlyfromanon-EEOLreleasethatismorethanthreereleasesaheadorbehind.
Forexample,youcannotdirectlyupgradefromJunosOSRelease10.
3(anon-EEOLrelease)toJunosOSRelease11.
4ordirectlydowngradefromJunosOSRelease11.
4toJunosOSRelease10.
3.
Toupgradeordowngradefromanon-EEOLreleasetoareleasemorethanthreereleasesbeforeorafter,firstupgradetothenextEEOLreleaseandthenupgradeordowngradefromthatEEOLreleasetoyourtargetrelease.
FormoreinformationaboutEEOLreleasesandtoreviewalistofEEOLreleases,seehttp://www.
juniper.
net/support/eol/junos.
html.
UpgradingtoJunosOSRelease12.
1R2orLaterwithExistingVSTPConfigurationsIfyouareupgradingtoJunosOSRelease12.
1R2orlaterfromRelease12.
1R1orearlier,ensurethatanyVSTPconfigurationsontheswitchmeetthefollowingguidelines.
IftheVSTPconfigurationsdonotmeettheseguidelinesandyouruntheupgrade,theupgradefails,andyouhavetoconnecttheconsole,changetheinvalidVSTPconfigurations,andcommitthechangedconfigurationsthroughtheconsole.
GuidelinesforVSTPconfigurationsare:IfyouhavespecifiedphysicalinterfacesforVSTP-configuredVLANs,ensurethatthoseinterfacesaremembersoftheVLANsspecifiedintheVSTPconfiguration.
IftheVSTPconfigurationspecifiesvlanall,thentheinterfacesconfiguredatthe[editprotocolsvstpvlanall]hierarchylevelmustbemembersofallVLANs.
IftheinterfacesarenotmembersoftheVLANsintheVSTPconfigurationsbutarealreadyaddedtotheVSTPconfigurations,removethemfromthoseconfigurations,addthemtotheVLANs,andthenaddthembacktotheVSTPconfigurations.
ThisissueisbeingtrackedbyPR/736488inourbugdatabase.
UpgradingfromJunosOSRelease10.
4R3orLaterThissectioncontainstheprocedureforupgradingfromJunosOSRelease10.
4R3orlatertoJunosOSRelease12.
2orlater.
YoucanusethisproceduretoupgradeJunosOSonastandaloneEXSeriesswitchwithasingleRoutingEngineandtoupgradeallmembersofaVirtualChassisorasinglememberofaVirtualChassis.
ToupgradeJunosOSonanEX6200orEX8200switchwithdualRoutingEngines,seeInstallingSoftwareonanEXSeriesSwitchwithRedundantRoutingEngines(CLIProcedure).
Copyright2013,JuniperNetworks,Inc.
30EXSeriesSwitchesReleaseNotesOnswitcheswithdualRoutingEnginesoronVirtualChassis,youmightalsobeabletousenonstopsoftwareupgrade(NSSU)toupgradeJunosOS.
See"UpgradingEXSeriesSwitchesUsingNSSU"onpage32formoreinformation.
ToupgradeJunosOSonaswitchwithasingleRoutingEngineoronaVirtualChassis:1.
DownloadthesoftwarepackageasdescribedinDownloadingSoftwarePackagesfromJuniperNetworks.
2.
(Optional)Backupthecurrentsoftwareconfigurationtoasecondstorageoption.
SeetheJunosOSInstallationandUpgradeGuideforinstructions.
3.
(Optional)Copythesoftwarepackagetotheswitch.
WerecommendthatyouuseFTPtocopythefiletothe/var/tmpdirectory.
ThisstepisoptionalbecauseyoucanalsoupgradeJunosOSusingasoftwareimagethatisstoredataremotelocation.
4.
Installthenewsoftwarepackageontheswitch:user@switch>requestsystemsoftwareaddpackageReplacepackagewithoneofthefollowingpaths:/var/tmp/package.
tgz—Forasoftwarepackageinalocaldirectoryontheswitchftp://hostname/pathname/package.
tgzorhttp://hostname/pathname/package.
tgz—Forasoftwarepackageonaremoteserverpackage.
tgzisthenameofthepackage;forexample,jinstall-ex-4200-11.
4R1.
8-domestic-signed.
tgz.
ToinstallsoftwarepackagesonallswitchesinamixedEX4200andEX4500VirtualChassis,usethesetoptiontospecifyboththeEX4200packageandtheEX4500package:user@switch>requestsystemsoftwareaddset[packagepackage]ToinstallthesoftwarepackageononlyonememberofaVirtualChassis,includethememberoption:user@switch>requestsystemsoftwareaddpackagemembermember-idOthermembersoftheVirtualChassisarenotaffected.
ToinstallthesoftwareonallmembersoftheVirtualChassis,donotincludethememberoption.
NOTE:Toaborttheinstallation,donotrebootyourdevice.
Instead,finishtheinstallationandthenissuetherequestsystemsoftwaredeletepackage.
tgzcommand,wherepackage.
tgzisthenameofthepackage;forexample,jinstall-ex-8200-11.
4R1.
8-domestic-signed.
tgz.
Thisisthelastchancetostoptheinstallation.
5.
Reboottheswitchtostartthenewsoftware:user@switch>requestsystemrebootTorebootonlyasinglememberinaVirtualChassis,includethememberoption:31Copyright2013,JuniperNetworks,Inc.
UpgradeandDowngradeInstructionsforJunosOSRelease13.
2X50forEXSeriesSwitchesuser@switch>requestsystemrebootmember6.
Afterthereboothasfinished,loginandverifythatthenewversionofthesoftwareisproperlyinstalled:user@switch>showversion7.
OnceyouhaveverifiedthatthenewJunosOSversionisworkingproperly,copytheversiontothealternateslicetoensurethatifthesystemautomaticallybootsfromthebackuppartition,itusesthesameJunosOSversion:user@switch>requestsystemsnapshotslicealternateToupdatethealternaterootpartitionsonallmembersofaVirtualChassis,includetheall-membersoption:user@switch>requestsystemsnapshotslicealternateall-membersUpgradingfromJunosOSRelease10.
4R2orEarlierToupgradetoJunosOSRelease13.
2fromJunosOSRelease10.
4R2orearlier,firstupgradetoJunosOSRelease11.
4byfollowingtheinstructionsintheRelease11.
4releasenotes.
SeeUpgradingfromJunosOSRelease10.
4R2orEarlierorUpgradingfromJunosOSRelease10.
4R3orLaterintheJunosOS11.
4ReleaseNotes.
UpgradingfromJunosOSRelease12.
3orEarlierIfyouareupgradingfromJunosOSRelease12.
3orearliertoRelease13.
2orlater,noticethatthedisplayoutputfortheshowversionoperationalcommandhaschanged.
InJunosOSRelease13.
2,severalofthesoftwarepackagesinstalledontheswitchthatweredisplayedintheshowversionoutputinJunosOSRelease12.
3orearliernolongerappear.
Instead,thesesoftwarepackageshavebeencombinedintofewersoftwarepackages,withsomeofthenewpackageshavingnewnames,suchasJUNOSEXSoftwareSuite.
UpgradingEXSeriesSwitchesUsingNSSUYoucanusenonstopsoftwareupgrade(NSSU)toupgradeJunosOSreleasesonstandaloneEX6200andEX8200switcheswithdualRoutingEnginesandonEX3300,EX4200,EX4500,andEX8200VirtualChassis.
ForinstructionsonhowtoperformanupgradeusingNSSU,see:UpgradingSoftwareonanEX3300VirtualChassis,EX4200VirtualChassis,EX4500VirtualChassis,orMixedEX4200andEX4500VirtualChassisUsingNonstopSoftwareUpgrade(CLIProcedure)UpgradingSoftwareonanEX6200orEX8200StandaloneSwitchUsingNonstopSoftwareUpgrade(CLIProcedure)UpgradingSoftwareonanEX8200VirtualChassisUsingNonstopSoftwareUpgrade(CLIProcedure)Table1onpage33detailstheswitchplatformsonwhichNSSUissupportedandtherequiredJunosOSrelease.
Copyright2013,JuniperNetworks,Inc.
32EXSeriesSwitchesReleaseNotesTable1:PlatformandJunosOSUpgradeSupportforNSSUUpgradetoJunosOSRelease12.
3UpgradefromJunosOSReleasex.
xSwitchPlatformNotsupportedReleasesearlierthan12.
1R2EX3300VirtualChassisSupported12.
1R2orlaterSupported12.
2R1orlaterNotsupportedReleasesearlierthan12.
1R1EX4200VirtualChassis,EX4500VirtualChassis,andmixedEX4200andEX4500VirtualChassisSupported12.
1R1orlaterSupported12.
2R1orlaterNotsupportedReleasesearlierthan12.
1R2EX6200standaloneswitchSupported12.
1R2orlaterSupported12.
2R1orlaterNotsupported10.
4R1or10.
4R2EX8200standaloneswitchSupported10.
4R3orlaterSupported11.
1R1orlaterSupported11.
2R1orlaterSupported11.
3R1orlaterSupported11.
4R1orlaterSupported12.
R1orlaterSupported12.
2R1orlater33Copyright2013,JuniperNetworks,Inc.
UpgradeandDowngradeInstructionsforJunosOSRelease13.
2X50forEXSeriesSwitchesTable1:PlatformandJunosOSUpgradeSupportforNSSU(continued)UpgradetoJunosOSRelease12.
3UpgradefromJunosOSReleasex.
xSwitchPlatformNotsupported10.
4R1orlaterEX8200VirtualChassisNotrecommended11.
1R1,11.
1R2,or11.
1R3Supported11.
1R4orlaterSupported11.
2R1orlaterSupported11.
3R1orlaterSupported11.
4R1orlaterSupported12.
1R1orlaterSupported12.
2R1orlaterNOTE:NSSUupgradestoJunosOSRelease12.
3R2—YoucanusethefollowingreleasesforNSSUupgradestoRelease12.
3R2:EX8200standaloneswitchesandEX8200VirtualChassis—Releases11.
4R7orlaterand12.
1R5orlaterEX3300VirtualChassis—Releases12.
2R3orlaterand12.
3R1orlaterEX4500andEX4200VirtualChassis—Release12.
1R5orlaterEX4550VirtualChassis—Releases12.
2R3orlaterand12.
3R1orlaterEX6200switches—Releases12.
2R3orlaterand12.
3R1orlaterOnanEX8200VirtualChassis,anNSSUoperationcanbeperformedonlyifyouhaveconfiguredtheXRE200ExternalRoutingEnginememberIDtobe8or9.
NOTE:Donotusenonstopsoftwareupgrade(NSSU)toupgradethesoftwareonanEX8200switchfromJunosOSRelease10.
4ifyouhaveconfiguredtheIGMP,MLD,orPIMprotocolsontheswitch.
IfyouattempttouseNSSU,yourswitchmightbeleftinanonfunctionalstatefromwhichitisdifficulttorecover.
Ifyouhavethesemulticastprotocolsconfigured,upgradethesoftwareontheEX8200switchfromJunosOSRelease10.
4byfollowingtheinstructionsinInstallingSoftwareonanEXSeriesSwitchwithRedundantRoutingEngines(CLIProcedure).
ThisissuedoesnotapplytoupgradesfromJunosOSRelease11.
1orlater.
Copyright2013,JuniperNetworks,Inc.
34EXSeriesSwitchesReleaseNotesNOTE:IfyouareusingNSSUtoupgradethesoftwareonanEX8200switchfromJunosOSRelease10.
4orJunosOSRelease11.
1andsFlowtechnologyisenabled,disablesFlowtechnologybeforeyouperformtheupgradeusingNSSU.
Aftertheupgradeiscomplete,youcanreenablesFlowtechnology.
IfyoudonotdisablesFlowtechnologybeforeyouperformtheupgradewithNSSU,sFlowtechnologydoesnotworkproperly.
ThisissuedoesnotaffectupgradesfromJunosOSRelease11.
2orlater.
NOTE:IfyouareusingNSSUtoupgradethesoftwareonanEX8200switchfromJunosOSRelease11.
1andNetBIOSsnoopingisenabled,disableNetBIOSsnoopingbeforeyouperformtheupgradeusingNSSU.
Aftertheupgradeiscomplete,youcanreenableNetBIOSsnooping.
IfyoudonotdisableNetBIOSsnoopingbeforeyouperformtheupgradewithNSSU,NetBIOSsnoopingdoesnotworkproperly.
ThisissuedoesnotaffectupgradesfromJunosOSRelease11.
2orlater.
RelatedDocumentationNewFeaturesinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage3ChangesinDefaultBehaviorandSyntaxinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage11LimitationsinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage11OutstandingIssuesinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage17ResolvedIssuesinJunosOSRelease13.
2X50forEXSeriesSwitchesonpage25ChangestoandErratainDocumentationforJunosOSRelease13.
2X50forEXSeriesSwitchesonpage29RevisionHistory22August2013—Revision5,JunosOSSoftwareforEXSeriesSwitches,Release13.
2X5031July2013—Revision4,JunosOSSoftwareforEXSeriesSwitches,Release13.
2X503July2013—Revision3,JunosOSSoftwareforEXSeriesSwitches,Release13.
2X50-D102July2013—Revision2,JunosOSSoftwareforEXSeriesSwitches,Release13.
2X50-D1028June2013—Revision1,JunosOSSoftwareforEXSeriesSwitches,Release13.
2X50-D1035Copyright2013,JuniperNetworks,Inc.
UpgradeandDowngradeInstructionsforJunosOSRelease13.
2X50forEXSeriesSwitches