Juniper JUNOS 10.1 - S 5-13-2010 Instruction Manual

Juniper Networks® JUNOS® 10.1 Software
Release Notes
Release 10.1R2
13 May 2010
Revision 1
These release notes accompany Release 10.1R2 of the JUNOS Software. They describe
device documentation and known problems with the software. JUNOS Software runs
on all Juniper Networks M Series, MX Series, and T Series routing platforms, SRX
Series Services Gateways, J Series Services Routers, and EX Series Ethernet Switches.
You can also find these release notes on the Juniper Networks JUNOS Software
Documentation Web page, which is located at
http://www.juniper.net/techpubs/software/junos.
Contents JUNOS Software Release Notes for Juniper Networks M Series Multiservice
Edge Routers, MX Series Ethernet Service Routers, and T Series Core
Routers .....................................................................................................6
New Features in JUNOS Release 10.1 for M Series, MX Series, and T
Series Routers ....................................................................................6
Class of Service ..................................................................................6
High Availability ...............................................................................12
Interfaces and Chassis ......................................................................12
JUNOS XML API and Scripting ..........................................................18
MPLS Applications ............................................................................21
Multiplay ..........................................................................................22
Routing Policy and Firewall Filters ....................................................23
Routing Protocols .............................................................................24
Services Applications ........................................................................27
Subscriber Access Management .......................................................27
System Logging ................................................................................36
■1

User Interface and Configuration ......................................................38
Changes in Default Behavior and Syntax in JUNOS Release 10.1 for M
Series, MX Series, and T Series Routers ............................................42
Class of Service ................................................................................42
Forwarding and Sampling ................................................................42
Interfaces and Chassis ......................................................................42
Layer 2 Ethernet Services .................................................................46
MPLS Applications ............................................................................46
Multiplay ..........................................................................................47
Routing Policy and Firewall Filters ....................................................47
Routing Protocols .............................................................................47
Services Applications ........................................................................48
Subscriber Access Management .......................................................50
User Interface and Configuration ......................................................51
VPNs ................................................................................................52
Issues in JUNOS Release 10.1 for M Series, MX Series, and T Series
Routers .............................................................................................54
Current Software Release .................................................................54
Previous Releases .............................................................................73
Errata and Changes in Documentation for JUNOS Software Release 10.1
for M Series, MX Series, and T Series Routers ..................................86
Changes to the JUNOS Documentation Set .......................................86
Errata ...............................................................................................86
Upgrade and Downgrade Instructions for JUNOS Release 10.1 for M
Series, MX Series, and T Series Routers ............................................89
Basic Procedure for Upgrading to Release 10.1 ................................90
Upgrading a Router with Redundant Routing Engines ......................92
Upgrading Juniper Routers Running Draft-Rosen Multicast VPN to
JUNOS Release 10.1 ...................................................................92
Upgrading the Software for a Routing Matrix ...................................94
Upgrading Using ISSU .......................................................................95
Upgrading from JUNOS Release 9.2 or Earlier on a Router Enabled
for Both PIM and NSR ................................................................95
Downgrade from Release 10.1 .........................................................96
JUNOS Software Release Notes for Juniper Networks SRX Series Services
Gateways and J Series Services Routers ..................................................98
New Features in JUNOS Release 10.1 for SRX Series Services Gateways
and J Series Services Routers ............................................................98
Software Features .............................................................................99
Hardware Features .........................................................................117
Changes In Default Behavior and Syntax in JUNOS Release 10.1 for SRX
Series Services Gateways and J Series Services Routers ..................117
Application Layer Gateways (ALGs) ................................................118
Chassis Cluster ...............................................................................118
Command-Line Interface (CLI) ........................................................119
Configuration .................................................................................122
Flow and Processing .......................................................................123
Interfaces and Routing ...................................................................124
Intrusion Detection and Prevention (IDP) .......................................124
J-Web .............................................................................................125
Management and Administration ...................................................125
2■
JUNOS 10.1 Software Release Notes

Security ..........................................................................................126
Known Limitations in JUNOS Release 10.1 for SRX Series Services
Gateways and J Series Services Routers ..........................................126
[accounting-options] Hierarchy ......................................................126
AX411 Access Point .......................................................................126
Chassis Cluster ...............................................................................126
Command-Line Interface (CLI) ........................................................128
Dynamic VPN .................................................................................128
Flow and Processing .......................................................................129
Hardware .......................................................................................129
Interfaces and Routing ...................................................................130
Intrusion Detection and Prevention (IDP) .......................................133
J-Web .............................................................................................134
NetScreen-Remote ..........................................................................135
Network Address Translation (NAT) ................................................135
Performance ..................................................................................136
SNMP .............................................................................................136
System ...........................................................................................136
Unified Threat Management (UTM) ................................................136
VPNs ..............................................................................................136
WLAN .............................................................................................136
Issues in JUNOS Release 10.1 for SRX Series Services Gateways and J
Series Services Routers ...................................................................137
Outstanding Issues In JUNOS Release 10.1 for SRX Series Services
Gateways and J Series Services Routers ...................................137
Resolved Issues in JUNOS Release 10.1 for SRX Series Services
Gateways and J Series Services Routers ...................................158
Errata and Changes in Documentation for JUNOS Release 10.1 for SRX
Series Services Gateways and J Series Services Routers ..................163
Application Layer Gateways (ALGs) ................................................163
Attack Detection and Prevention ....................................................163
CLI Reference .................................................................................164
Command-Line Interface (CLI) ........................................................164
CompactFlash Card Support ...........................................................164
Flow and Processing .......................................................................164
Hardware Documentation ..............................................................165
Installing Software Packages ..........................................................166
Integrated Convergence Services ....................................................167
Interfaces and Routing ...................................................................167
Intrusion Detection and Prevention (IDP) .......................................168
J-Web .............................................................................................170
Screens ...........................................................................................170
Hardware Requirements for JUNOS Release 10.1 for SRX Series Services
Gateways and J Series Services Routers ..........................................170
Transceiver Compatibility for SRX Series and J Series Devices .......171
Power and Heat Dissipation Requirements for J Series PIMs ..........171
Supported Third-Party Hardware for J Series Services Routers .......171
J Series CompactFlash and Memory Requirements ........................172
Dual-Root Partitioning Scheme Documentation for SRX Series Services
Gateways ........................................................................................173
Dual-Root Partitioning Scheme .......................................................173
■3

Maximizing ALG Sessions .....................................................................181
Using Dual Chassis Cluster Control Links: Upgrade Instructions for the
Second Routing Engine ..................................................................182
Upgrade and Downgrade Instructions for JUNOS Release 10.1 for SRX
Series Services Gateways and J Series Services Routers ..................183
JUNOS Software Release Notes for EX Series Switches ................................184
New Features in JUNOS Release 10.1 for EX Series Switches ................184
Hardware .......................................................................................184
Access Control and Port Security ....................................................185
Bridging, VLANs, and Spanning Trees ............................................185
Class of Service (CoS) .....................................................................186
Infrastructure .................................................................................186
Interfaces .......................................................................................186
Layer 2 and Layer 3 Protocols ........................................................186
Management and RMON ................................................................186
MPLS ..............................................................................................187
Packet Filters ..................................................................................187
Changes in Default Behavior and Syntax in JUNOS Release 10.1 for EX
Series Switches ...............................................................................187
Layer 2 and Layer 3 Protocols ........................................................188
Infrastructure .................................................................................188
User Interface and Configuration ....................................................188
Limitations in JUNOS Release 10.1 for EX Series Switches ....................188
Access Control and Security ...........................................................189
Class of Service ..............................................................................189
Firewall Filters ................................................................................189
Infrastructure .................................................................................189
Interfaces .......................................................................................190
Outstanding Issues in JUNOS Release 10.1 for EX Series Switches ........191
Access Control and Port Security ....................................................191
Bridging, VLANs, and Spanning Trees ............................................191
Class of Service ..............................................................................192
Firewall Filters ................................................................................192
Infrastructure .................................................................................192
Interfaces .......................................................................................193
J-Web Interface ...............................................................................193
Resolved Issues in JUNOS Release 10.1 for EX Series Switches .............194
Access Control and Port Security ....................................................194
Bridging, VLANs, and Spanning Trees ............................................194
Class of Service ..............................................................................195
Firewall Filters ................................................................................195
Hardware .......................................................................................196
Infrastructure .................................................................................196
J-Web Interface ...............................................................................197
Errata in Documentation for JUNOS Release 10.1 for EX Series
Switches .........................................................................................198
4■
JUNOS 10.1 Software Release Notes

Upgrade and Downgrade Issues for JUNOS Release 10.1 for EX Series
Switches .........................................................................................198
Upgrading or Downgrading from JUNOS Release 9.4R1 for EX Series
Switches ..................................................................................198
Upgrading from JUNOS Release 9.3R1 to Release 10.1 for EX Series
Switches ..................................................................................199
Upgrading from JUNOS Release 9.2 to Release 10.1 for EX Series
Switches ..................................................................................199
Downgrading from JUNOS Release 10.1 to Release 9.2 for EX4200
Switches ..................................................................................200
JUNOS Documentation and Release Notes ..................................................202
Documentation Feedback ............................................................................202
Requesting Technical Support .....................................................................202
Revision History ..........................................................................................204
■5

JUNOS Software Release Notes for Juniper Networks M Series Multiservice Edge
Routers, MX Series Ethernet Service Routers, and T Series Core Routers
■New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series
Routers on page 6
■Changes in Default Behavior and Syntax in JUNOS Release 10.1 for M Series,
MX Series, and T Series Routers on page 42
■Issues in JUNOS Release 10.1 for M Series, MX Series, and T Series
Routers on page 54
■Errata and Changes in Documentation for JUNOS Software Release 10.1 for M
Series, MX Series, and T Series Routers on page 86
■Upgrade and Downgrade Instructions for JUNOS Release 10.1 for M Series, MX
Series, and T Series Routers on page 89
New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers
The following features have been added to JUNOS Release 10.1. Following the
description is the title of the manual or manuals to consult for further information.
Class of Service
■Intelligent oversubscription service support (MX Series routers with Trio
MPC/MIC interfaces)—Arriving packets are assigned to one of two traffic classes
(control and best-effort) based on their header types and destination MAC address.
This allows for lower priority packets to be dropped more intelligently when
oversubscription occurs. Only packets mapped to queue 3 are marked as control
packets. Protocols such as telnet, FTP, and SSH that are mapped to queue 0 are
classified as best-effort. No configuration is necessary, but the queue assignments
can be altered with a multifield classifier.
[Class of Service]
■CoS aspects of the MPC/MIC (MX Series routers with Trio MPC/MIC
interfaces)—Cover all aspects of CoS configuration for this hardware combination.
Support includes shaping rates at the queue level, configurable bandwidth profiles
with percentages, dynamic bandwidth allocation among different services,
scheduler node scaling, and delay buffer allocation. To configure, include the
relevant statements at the [edit class-of-service] hierarchy level and apply them
if necessary at other hierarchy levels such as the [edit interfaces] hierarchy level.
[Class of Service, Network Interfaces]
■Per-priority shaping (MX Series platforms with Trio MPC/MIC
interfaces)—Enables you to configure a separate shaping rate for each of the
five priority levels so that higher priority services such as voice and video do not
starve lower priority services such as data. To configure, include the
shaping-rate-(excess | priority)-level rate [ burst-size burst ] statement at the [edit
class-of-service traffic-control-profiles tcp-name]hierarchy level and apply the traffic
control profile at the [edit interfaces] hierarchy level.
[Class of Service]
6■JUNOS Software Release Notes for Juniper Networks M Series Multiservice Edge Routers, MX Series Ethernet Service Routers,
and T Series Core Routers
JUNOS 10.1 Software Release Notes

■Distribute excess bandwidth among different services for a subscriber (MX
Series routers with Trio MPC/MIC interfaces)—Service providers often use
tiered services that must carry excess bandwidth as traffic patterns vary. By
default, excess bandwidth between a configured guaranteed rate and shaping
rate is shared equally among all queues, which might not be optimal for all
subscribers to a service. You can control the distribution of this excess bandwidth
with the excess-rate statement. To configure the excess rate for a traffic control
profile, include the excess-rate statement at the [edit class-of-service
traffic-control-profiles tcp-name]hierarchy level and apply the traffic control profile
at the [edit interfaces] hierarchy level. To configure the excess rate for a queue,
include the excess-rate and excess-priority statements at the [edit class-of-service
scheduler scheduler-name]hierarchy level.
[Class of Service]
■Scheduler node scaling (MX Series routers with Trio MPC/MIC interfaces)—The
hardware supports multiple levels of scheduler nodes. In per-unit-scheduling
mode, each logical interface (unit) can have four or eight queues and has a
dedicated level 3 scheduler node. The logical interfaces share a common level
2 node (one per port). In hierarchical-scheduling mode, a set of logical interfaces,
each with four or eight queues, has a level 2 CoS profile and one of its logical
interface children has a level 3 CoS profile. To better control system resources
in hierarchical-scheduling mode, you can limit the number of hierarchical levels
in the scheduling hierarchy to two. In this case, all logical interfaces and interface
sets with CoS profiles share a single (dummy) level 2 node, thereby increasing
the maximum number of logical interfaces with CoS profiles (the interface sets
must be at level 3). To configure scheduler node scaling, include the
maximum-hierarchy-levels statement at the [edit interfaces xe-fpc/pic/port
hierarchical-scheduler] hierarchy level. The only supported value is 2.
[Class of Service, Network Interfaces]
■Forwarding-class aliases (M320 and T Series routers)—Enable you to configure
up to 16 forwarding classes and 8 queues, with multiple forwarding classes
assigned to single queues. To configure, include the class and queue-num
statements at the [edit class-of-service forwarding-classes] hierarchy level.
[Class of Service]
■VLAN shaping on aggregate devices (MX Series routers with Trio MPC/MIC
interfaces)—VLAN shaping (per-unit scheduling) is supported on aggregated
Ethernet interfaces when link protection is enabled on the aggregated Ethernet
interface. When VLAN shaping is configured on aggregate Ethernet interfaces
with link protection enabled, the shaping is applied to the active child link. To
configure link protection on aggregated Ethernet interfaces, include the
link-protection statement at the [edit interfaces aexaggregated-ether-options]
hierarchy level. Traffic passes only through the designated primary link. This
includes transit traffic and locally generated traffic on the router. When the
primary link fails, traffic is routed through the backup link. You also can reverse
traffic, from the designated backup link to the designated primary link. To revert
back to sending traffic to the primary designated link when traffic is passing
through the designated backup link, use the revert command; for example, request
interfaces revert ae0. To configure a primary and a backup link, include the
primary and backup statements at the [edit interfaces ge-fpc/pic/port
gigether-options 802.3ad aex]hierarchy level or the [edit interfaces xe-fpc/pic/port
fastether-options 802.3ad aex]hierarchy level. To disable link protection, delete
New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers ■7
New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

the link-protection statement at the [edit interfaces aexaggregated-ether-options
link-protection] hierarchy level. To display the active, primary, and backup link
for an aggregated Ethernet interface, use the operational mode command show
interfaces redundancy aex.
[Class of Service, Network Interfaces]
■Re-marking of MVPN GRE encapsulation DCSP at ASBR (MX Series routers
with Trio MPC/MIC interfaces)—Enables you to configure DSCP marking for
GRE encapsulated packets that aligns with the service provider core CoS policy
for an MVPN. To configure, include the DSCP rewrite-rule dscp dscp-rule-name
with the values at the [edit class-of-service] hierarchy level and then apply the
rewrite rule to the core-facing multicast interface at the [edit class-of-service
interfaces] hierarchy level.
[Class of Service]
■PD-5-10XGE-SFPP, 10-port 10-Gigabit Ethernet (Type 4) PIC (T640, T1600,
and TX Matrix routers with G-FPC4, ST-FPC4, and ST-FPC4.1)—Supports a
WAN bandwidth of 100 Gbps in addition to the following features:
■Intelligent handling of oversubscribed traffic
■Line rate operation on up to five 10-Gigabit Ethernet ports
■Tap features, such as flexible encapsulation, source address (SA) MAC
learning, MAC accounting, and MAC policing
■Stacked virtual LAN (VLAN) tag and VLAN rewrite functionalities
[Network Interfaces, Class of Service, PIC Guide]
■Intelligent oversubscription services (MX Series with 16-port 10-Gigabit
Ethernet MPC with SFP+)—The 16-port 10-Gigabit Ethernet Modular Port
Concentrator (MPC) is an oversubscribed configuration. Consequently, it is
necessary to protect control traffic over best-effort traffic as soon as packets
enter the line card. To do this, packets entering the line card are assigned a
preclassifier control traffic class according to the header types (such as destination
MAC addresses, and Layer 4 ports) in the packet. The preclassifier provides a
good way to classify and queue important control traffic in a different high-priority
queue from that used for best-effort traffic.
The preclassifier (control or best effort) is assigned prior to packets being accepted
into the initial stream and is used by the line card as an early designation (before
any class-of-service configuration is applied). When oversubscription occurs,
control traffic will be queued separately and should not be subject to any dropped
packets.
The Layer 2 protocols supporting the preclassifier are:
■802.1ah
■802.1g
■802.1x
■802.3ad
■ARP
8■New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers
JUNOS 10.1 Software Release Notes

■GMRP
■GVRP
■LACP
■PVST
■xSTP
The Layer 3 protocols supporting the preclassifier are:
■IGMP
■IPv4/IPv6 ICMP
■IPv4/IPv6 ISIS
■IPv4/IPv6 OSPF
■IPv4/IPv6 PIM
■IPv4 Router Alert
■IPv4/IPv6 RSVP
■IPv4/IPv6 VRRP
The Layer 4 protocols supporting the preclassifier are:
■IIPv4/ IPv6 BGP
■IPv4/ IPv6 LDP
■IPv4 UDP/L2TP
■RIP (UDP port checks)
The preclassifier is also supported on label-switching encapsulation PPP.
[Class of Service]
■Feature support on 16-port 10-Gigabit Ethernet MPC with SFP+ (MX Series
routers)—The following features are supported on the 16-port 10-Gigabit Ethernet
MPC with SFP+:
■Accepts traffic destined for GRE tunnels or DVMRP (IP-in-IP) tunnels (JUNOS
Release 10.0R2)
■Bidirectional Forwarding Detection (BFD) protocol (JUNOS Release 10.0R2)
■Border Gateway Protocol (BGP) (JUNOS Release 10.0R2)
■BGP/Multiprotocol Label Switching (MPLS) virtual private networks (VPNs)
(JUNOS Release 10.0R2)
■Distance Vector Multicast Routing Protocol (DVMRP) and generic routing
encapsulation (GRE) support, access side and server side (JUNOS Release
10.0R2)
■Firewall filters (JUNOS Release 10.0R2)
New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers ■9
New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

■Flexible Ethernet encapsulation (JUNOS Release 10.0R2)
■Graceful Routing Engine switchover (GRES) (JUNOS Release 10.0R2)
■Ingress differentiated (JUNOS Release 10.0R2)
■Differentiated Services code point rewrite (DSCP) (JUNOS Release 10.0R2)
■Intelligent oversubscription (JUNOS Release 10.0R2)
■Integrated routing and bridging (IRB) (JUNOS Release 10.1R1)
■Intermediate System-to-Intermediate System (IS-IS) (JUNOS Release 10.0R2)
■Internet Group Management Protocol (IGMP) (excludes snooping) (JUNOS
Release 10.0R2)
■IPv4 (JUNOS Release 10.0R2)
■IP multicast (JUNOS Release 10.0R2)
■Label Distribution Protocol (LDP) (JUNOS Release 10.0R2)
■Labeled-switched path (LSP) accounting, policers, and filtering (JUNOS Release
10.0R2)
■LAN-PHY mode (JUNOS Release 10.0R2)
■Layer 2 frame filtering (JUNOS Release 10.0R2)
■IEEE 802.3ad link aggregation (JUNOS Release 10.0R2)
■Link Aggregation Control Protocol (LACP) (JUNOS Release 10.0R2)
■Local loopback (JUNOS Release 10.0R2)
■MAC learning, policing (JUNOS Release 10.0R2)
■Multiple tag protocol identifiers (TPIDs), accounting, and filtering (JUNOS
Release 10.0R2)
■Multiprotocol Label Switching (MPLS) (JUNOS Release 10.0R2)
■Nonstop active routing (NSR) (JUNOS Release 10.0R2)
■Multitopology routing (MTR) (JUNOS Release 10.0R2)
■Open Shortest Path First (OSPF) (JUNOS Release 10.0R2)
■Packet mirroring (JUNOS Release 10.0R2)
■Quality of service (QoS) per port: (JUNOS Release 10.0R2)
■Eight queues per port
■Excess-rate configuration at the traffic-control-profile level
■Excess-rate and excess-priority configuration at the queue level
■Shaping at the port level
10 ■New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers
JUNOS 10.1 Software Release Notes

■Shaping at the queue level
■Scheduling of queues based on weighted round-robin (WRR) per priority
class
■Tricolor marking
■Weighted random early detection (WRED)
■QoS per virtual LAN (VLAN): (JUNOS Release 10.0R2)
■Accounting, filtering, and policing
■IEEE 802.1p rewrite
■Classification
■Excess-rate configuration at the traffic-control-profile level
■Tricolor marking
■Resource Reservation Protocol (RSVP) (JUNOS Release 10.0R2)
■Routing Information Protocol (RIP) (JUNOS Release 10.0R2)
■Simple Network Management Protocol (SNMP) (JUNOS Release 10.0R2)
■IEEE 802.1Q VLANs: (JUNOS Release 10.0R2)
■VLAN stacking and rewriting
■Channels defined by two stacked VLAN tags
■Flexible VLAN tagging
■IP service for nonstandard TPID and stacked VLAN tags
■Virtual private LAN service (VPLS) (JUNOS Release 10.0R2)
■Virtual private network (VPN) (JUNOS Release 10.0R2)
■Virtual Router Redundancy Protocol (VRRP) for IPv4 (JUNOS Release 10.0R2)
To support these features, some modifications have been made to the following
configuration statements:
■The ability to configure the DSCP as the action of a filter rule is already
present in the JUNOS Software. However, with this line card, the value range
permitted is modified from 0, to 0through 63. To include DSCP as the action
of a filter rule, include the dscp value parameter at the [edit firewall filter
filter-name]hierarchy level.
■To fully leverage the features offered through the new chipset on the line
card, include the enhanced-hash-key option at the [edit forwarding-options]
hierarchy level.
[Class of Service]
New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers ■11
New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

■IEEE 802.1ak-2007 MVRP (MX Series routers)—The Multiple VLAN Registration
Protocol (MVRP) is a standards-based Layer 2 network protocol used among
switches to dynamically share and update VLAN information with other bridges.
VLAN information exchanged includes:
■The set of VLANs that currently have active members
■The ports through which the active members can be reached
To operate MVRP, edge ports should have the static VLAN configuration. The
edge ports will not be configured for MVRP. MVRP is only enabled on the
core-facing trunk ports where no static VLANs are configured.
To configure MVRP, include the mvrp statement and desired options at the [edit
protocols] hierarchy level.
[Class of Service]
■Elevated packet drops during oversubscription (MX Series routers with Trio
MPC/MIC interfaces)—During periods of oversubscription, the WRED process
drops more packets than expected from relatively full queues. There is no
configuration for this feature, which transparently applies scaling to
oversubscribed queues.
[Class of Service]
High Availability
■Enhancements to unified ISSU support on PICs (T Series)—JUNOS Release 10.1
extends unified ISSU support for the following PICs to T Series routers:
■PB-1CHOC12-STM4-IQE-SFP, 1-port channelized OC12/STM4 enhanced IQ
PIC
■PB-1OC12-STM4-IQE-SFP, 1-port nonchannelized OC12/STM4 enhanced IQ
PIC
■PB-4CHDS3-E3-IQE-BNC, 4-port channelized DS3/E3 enhanced IQ PIC
■PB-4DS3-E3-IQE-BNC, 4-port non-channelized DS3/E3 enhanced IQ PIC
[High Availability]
Interfaces and Chassis
■New 60-Gigabit Ethernet Queuing MPC (model number
MX-MPC2-3D-Q)—Supported on MX Series routers. For a list of supported MPCs,
see the MX Series Line Card Guide.
■New 60-Gigabit Ethernet MPC (model number MX-MPC2-3D)—Supported on
MX Series routers. For a list of supported MPCs, see the MX Series Line Card
Guide.
■New 60-Gigabit Ethernet Enhanced Queuing MPC (model number
MX-MPC2-3D-EQ)—Supported on MX Series routers. For a list of supported
MPCs, see the MX Series Line Card Guide.
12 ■New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers
JUNOS 10.1 Software Release Notes

■New 20-port Gigabit Ethernet MIC with SFP (model number
MIC-3D-20GE-SFP)—Supported on MX Series routers. For a list of supported
MPCs, see the MX Series Line Card Guide.
■New Modular Port Concentrators (MPCs) and Modular Interface Cards
(MICs)—Supported on MX Series platforms. Up to two MICs plug into the MPC
to provide the physical interface for the MPC line card. The MPCs provide
increased capacity on Gigabit Ethernet and 10-Gigabit Ethernet hardware. For a
list of supported MPCs and MICs, see the MX Series Line Card Guide.
[Network Interfaces]
■New 4-port 10-Gigabit Ethernet MIC with XFP (model number
MIC-3D-4XGE-XFP)—Supported on MX Series routers. For a list of supported
MPCs, see the MX Series Line Card Guide.
■Layer 2 VPLS, IRB, and mesh group feature parity (MX Series routers with
Trio MPC/MIC interfaces)—Support for Layer 2 feature parity with JUNOS Release
9.1 on MX Series routers that include Trio Modular Port Concentrators (MPCs)
and Modular Interface Cards (MICs).
Layer 2 feature parity includes:
■Layer 2 bridging
■VPLS forwarding
■MAC address learning, aging, and MAC address limit
■Mesh group support
■Implicit VLAN mapping
■Integrated routing and bridging (IRB)
■Multicast over IRB
■MAC statistics
Layer 2 features that are not supported in this release include:
■Spanning Tree Protocols (xSTP)
■VLAN Spanning Tree Protocol (VSTP)
■Multiple Spanning Tree Protocol (MSTP)
■Rapid Spanning Tree Protocol (RSTP)
■Layer 2 Tunneling Protocol (L2TP)
■Upgrading a T1600 router to be the LCC0 of the TX Matrix Plus platform—You
can now upgrade an operational T1600 router to be the lcc0 in a newly configured
TX Matrix Plus platform. The procedures require JUNOS Release 10.1 on the TX
Matrix Plus router and the T1600 router. Reboot is required to transfer control
of the T1600 router to the routing matrix. You can also downgrade the lcc0 to
a standalone T1600 router by rolling back to the former configuration. Upgrade
and integration of subsequent operational T1600 routers to form lcc1 and lcc2
New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers ■13
New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

(and so on) is not supported. Use the offline procedures to upgrade and integrate
the remaining T1600 routers into the routing matrix.
[TX Matrix Plus Hardware, System Basics and Services Command Reference]
■Per-unit scheduling for GRE tunnels using IQ2 PICs (M7i, M10i, M120, and
M320 routers with E3–FPC)—Supports enhanced IQ2 PIC and IQ2E PIC
performance, adding all functionality of tunnel PICs. The QoS for the GRE tunnel
traffic will be applied as the traffic is looped through the IQ2/IQ2E PIC.
Shaping is performed on full packets that pass through the GRE tunnel.
IQ2 and IQ2E PICs support all interfaces that are supported on tunnel PICs, as
follows:
■gr-fpc/pic/port
■vt-fpc/pic/port
■lt-fpc/pic/port
■ip-fpc/pic/port
■pe-fpc/pic/port
■pd-fpc/pic/port
■mt-fpc/pic/port
The port variable is always zero.
The provided tunnel functionality is the same as that of regular tunnel PICs.
When tunnel services are enabled on IQ2 and IQ2E PICs, they work exclusively
as tunnel PICs. The physical ports on the PICs cannot be used in tunnel mode.
To configure exclusive tunnel mode, use the tunnel-only statement at the [chassis
fpc number pic number] hierarchy level.
You can use the show interfaces queue gr-fpc/pic/port command to display
statistics for the specified tunnel.
[Network Interfaces, Class of Service, PIC Guide]
■Root System Domain (RSD) configuration of logical interface filters on shared
interfaces (JCS1200 platform)—Enables Root System Domain (RSD) configuration
support for logical interface filters on shared interfaces. In previous releases,
logical interface filters were configured on each Protected System Domain (PSD).
This release supports configuration on the RSD.
To configure a logical interface filter on the RSD, apply the firewall filter to the
logical interface on the shared interface by including the filter output filter-name
statement at the [edit interfaces interface-name unit logical-unit-number]hierarchy
level on the RSD.
Filtering is performed on the PSD, but logical interface filters configured on the
RSD are applied automatically by the PSD. Filters configured on the RSD can
co-exist with filters configured on the PSD. Counter statistics related to PSD
filtering are available on the RSD.
[Protected System Domain]
14 ■New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers
JUNOS 10.1 Software Release Notes

■Two new AC power supply modules in chassis—The JUNOS Software now
supports two new AC power supply modules on T640 and T1600 routers: AC
Power Entry Module 10kW US and AC Power Entry Module 10kW EMEA (for
U.S. and EMEA markets, respectively). The two Power Entry Modules (PEMs)
cannot interoperate and the JUNOS Software reports an alarm when they do.
The show chassis environment pem command output will show AC Input: status
instead of DC Input: status and the Temperature will show the actual temperature
reading. Two new power supply descriptions, US and EMEA, are added to
distinguish the new modules from existing ones in the output of the show chassis
hardware command output.
[System Basics and Service Command Reference]
■Next-hop cloning and permutations disabled in T Series enhanced scaling
FPCs (FPC Type 1-ES, FPC Type 2-ES, FPC Type 3-ES, and FPC Type 4-ES)—The
next-hop cloning and permutations are now disabled in these FPCs with enhanced
load-balancing capability. As a result, the memory utilization is reduced for a
highly scaled system with a high number of next hops on ECMP or aggregated
interfaces.
[System Basics]
■Fragmentation support for GRE-encapsulated packets (Multiservices DPC)
(M120, M7i/M10i with enhanced CFEB, M320 with E3 FPC, and MX Series
routers only)—Enables the Packet Forwarding Engine to update the IP
identification field in the outer IP header of packets encapsulated with generic
routing encapsulation (GRE), so that reassembly of the packets is possible after
fragmentation. The previous CLI constraint check that requires you to configure
either the clear-dont-fragment-bit statement or a tunnel key with the
allow-fragmentation statement is no longer enforced. There are no associated
changes to the CLI statements or operational mode commands.
NOTE: For other routers, the earlier configuration constraint check still holds.
[Services Interfaces, MPLS Applications, MX Series Layer 2 Configuration Guide]
■NAT compliance enhancements—Add modifications to the existing NAT
functionality on the services PICs to achieve compliance with RFCs UDP 4787,
TCP 5382, and ICMP 5508. These enhancements apply to IPv4–IPv4, IPv6–IPv6,
and IPv4–IPv6 source NAT and are not supported with destination NAT. New
CLI configuration settings associated with RFC 4787 include the mapping-timeout
statement at the [edit services nat pool pool-name]hierarchy level and the
address-pooling, filtering-type, and mapping-type statements at the [edit services
nat rule rule-name term term-name then translated] hierarchy level. There are no
associated changes to the operational mode commands.
[Services Interfaces]
■Support for VRF in Routing Engine-based sampling on M Series, M320, MX
Series, M120, and T Series routers—For VRF Routing Engine-based sampling,
the kernel queries the correct VRF route table based on the ingress interface
index for the received packet. For interfaces configured in VRF, the sampled
packets contain the correct input and output interface SNMP index, the source
and destination AS numbers, and the source and destination mask.
New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers ■15
New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

There are two ways to verify the sampled packets. The first is to include the file
sampled statement at the [edit forwarding-options sampling traceoptions] hierarchy
level and the local dump statement at the [edit forwarding-options family inet output
flow-server server] hierarchy level, and check the sampled file using the tail –f
/var/tmp/sampled command from the router shell. The second is to export and
verify the sampled packets to the flow-server.
[Services Interfaces, Feature Guide]
■New 4-port Channelized OC12 Enhanced Intelligent Queuing (IQE) type 3
PIC (M Series and T Series routers)—Provides increased channelization and an
improved QoS model; with channelization capabilities and scaling that make it
ideal for edge aggregation.
Improved QoS functionality supports policing based on DSCP/IPPREC/EXP, five
priority levels, two shaping rates (CIR and PIR), option to use shared scheduling
on set of logical interfaces, DSCP rewrite on ingress, and configurable delay
buffers for queueing. The QoS capabilities provide service differentiation for
service providers.
The interface configuration syntax of existing IQ PICs is retained, but
configuration limits are changed to match the augmented capabilities of IQE
PICs.
All functionality available on the 4-port Channelized OC12 IQ Type 2 PIC is
supported by this PIC.
[Network Interfaces]
■Enhanced Intelligent Queuing (IQE) PICs add support for T3 and T1
channelization under SDH framing (M40e, M120, and M320 with Sahara-FPC,
and T Series routers)—The following IQE PICs are supported:
■1-port COC48 IQE
■4-port COC12 IQE
■1-port COC12 IQE
■2-port COC3 IQE
The JUNOS Software supports T1 and CT1 interface types under CAU4. To
configure T1 and CT1 interfaces under CAU4, use the t1 and ct1 statements at
the [edit interfaces cau4-fpc/pic/port:unit partition number interface-type]hierarchy
level.
With T1 and CT1 interface configurations under CAU4 interfaces, you can
configure a maximum of 84 T1 or CT1 inerfaces. However, the partition range
under CAU4 interfaces was previously restricted to from 1 to 63. This range has
increased to from 1 to 84 for T1 and CT1 interfaces.
The JUNOS Software supports T1, CT1, T3, and CT3 interfaces under Channelized
AU4 partitions. To configure T1, CT1, T3, and CT3 interfaces under Channelized
AU4, use the ct1 and t1 statements at the [edit interfaces cau4-fpc/pic/port:unit
partition partition-number]hierarchy level or the ct3 and t3 statements at the [edit
interfaces cau4-fpc/pic/port:unit partition number interface-type]hierarchy level.
The JUNOS Software also supports M13 mapped T1 interfaces under CAU4. To
configure a T1 interface under CAU4, use the t1 statement at the [edit interfaces
16 ■New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers
JUNOS 10.1 Software Release Notes

cau4-fpc/pic/port:unit partition partition-number interface-type t1] or [edit interfaces
cau4-fpc/pic/port:unit partition partition-number interface-type ct1] hierarchy level.
The JUNOS Software does not allow combined configurations of E1 and E3
interfaces together under a CAU4 interface.
Similarly, you cannot mix T1, E1, T3, and E3 interfaces directly under CAU4.
NOTE: The TUG-3 partition is not supported.
ITU-T VT-mapping in combination with TUG3 partition is not supported.
[Network Interfaces, PIC Guide]
■Stateful firewall chaining for FTP, TFTP, and RTSP data sessions (MX Series
routers with Multiservices DPCs, and M120 or M320 routers with Multiservices
400 PICs)—Adds support for stateful firewall rule sets in Dynamic Application
Awareness for JUNOS Software service chains. New application-level gateways
(ALGs) are available for FTP (junos-ftp), TFTP (junos-tftp), and RTSP (junos-rtsp);
you can include them as values for the applications statement at the [edit services
stateful-firewall rule rule-name term term-name from] hierarchy level. In addition,
you can include new statement options at the [edit interfaces ms-fpc/pic/port
services-options ignore-errors] hierarchy level to enable stateful firewall sessions
to operate in a no-drop mode and ignore various traffic errors that would normally
result in dropped packets. There are no CLI changes in the APPID, IDP, AACL,
or L-PDF configurations. The associated operational mode commands should
report the new applications when identified.
[Services Interfaces]
New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers ■17
New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

JUNOS XML API and Scripting
18 ■New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers
JUNOS 10.1 Software Release Notes

■New JUNOS XML API operational request tag elements—Table 1 on page 19
lists the JUNOS Extensible Markup Language (XML) operational request tag
elements that are new in JUNOS Release 10.1, along with the corresponding CLI
command and response tag element for each one.
Table 1: JUNOS XML Tag Elements and CLI Command Equivalents New in JUNOS 10.1
Response Tag ElementCLI CommandRequest Tag Element
NONEclear dhcpv6 server binding<clear-dhcpv6-server-binding-information>
clear_dhcpv6_server_binding_information
NONEclear dhcpv6 server statistics<clear-dhcpv6-server-statistics-information>
clear_dhcpv6_server_statistics_information
NONEclear mpls static-lsp<clear-mpls-static-lsp-information>
clear_mpls_static_lsp_information
NONEclear mvrp statistics<clear-mvrp-interface-statistics>
clear_mvrp_interface_statistics
NONEclear security idp application-ddos cache<clear-idp-appddos-cache>
clear_idp_appddos_cache
<clear-idp-status-information>clear security idp status<clear-idp-status-information>
clear_idp_status_information
<vrrp-message>clear vrrp<clear-vrrp-information>
clear_vrrp_information
<vrrp-message>clear vrrp interface<clear-vrrp-interface-statistics>
clear_vrrp_interface_statistics
NONErequest system scripts refresh-from<request-script-refresh-from>
request_script_refresh_from
<dhcpv6-server-binding-information>show dhcpv6 server binding<get-dhcpv6-server-binding-information>
get_dhcpv6_server_binding_information
<dhcpv6-server-statistics-information>show dhcpv6 server statistics<get-dhcpv6-server-statistics-information>
get_dhcpv6_server_statistics_information
<mpls-static-lsp-information>show mpls static-lsp<get-mpls-static-lsp-information>
get_mpls_static_lsp_information
<mvrp-information>show mvrp<get-mvrp-information>
get_mvrp_information
<mvrp-applicant-state>show mvrp applicant-state<get-mvrp-applicant-information>
get_mvrp_applicant_information
<mvrp-vlan-information>show mvrp dynamic-vlan-memberships<get-mvrp-dynamic-vlan-memberships>
get_mvrp_dynamic_vlan_memberships
<mvrp-interface-information>show mvrp interface<get-mvrp-interface-information>
get_mvrp_interface_information
New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers ■19
New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

Table 1: JUNOS XML Tag Elements and CLI Command Equivalents New in JUNOS 10.1 (continued)
Response Tag ElementCLI CommandRequest Tag Element
<mvrp-registration-information>show mvrp registration-state<get-mvrp-registration-state>
get_mvrp_registration_state
<mvrp-interface-statistics>show mvrp statistics<get-mvrp-interface-statistics>
get_mvrp_interface_statistics
<idp-subscriber-policy-list>show security idp policies<get-idp-subscriber-policy-list>
get_idp_subscriber_policy_list
<idp-policy-template-information>show security idp policy-templates-list<get-idp-policy-template-information>
get_idp_policy_template_information
<idp-detail-status-information>show security idp status detail<get-idp-detail-status-information>
get_idp_detail_status_information
<service-nat-mapping-information>show services nat mappings<get-service-nat-mapping-information>
get_service_nat_mapping_information
<task-memory-information>show task memory<get-task-memory-information>
get_task_memory_information
<vrrp-information>show vrrp<get-vrrp-information>
get_vrrp_information
<vrrp-information>show vrrp interface<get-vrrp-interface-information>
get_vrrp_interface_information
<vrrp-information>show vrrp track<get-vrrp-track-interfaces>
get_vrrp_track_interfaces
20 ■New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers
JUNOS 10.1 Software Release Notes