Juniper JUNOS 10.1 - S REV 4 Instruction Manual

Juniper Networks®JUNOS® 10.1 Software
Release Notes
Release 10.1R3
13 July 2010
Revision 4
These release notes accompany Release 10.1R3 of the JUNOS Software. They describe
device documentation and known problems with the software. JUNOS Software runs
on all Juniper Networks M Series, MX Series, and T Series routing platforms, SRX
Series Services Gateways, J Series Services Routers, and EX Series Ethernet Switches.
You can also find these release notes on the Juniper Networks JUNOS Software
Documentation Web page, which is located at
http://www.juniper.net/techpubs/software/junos.
Contents JUNOS Software Release Notes for Juniper Networks M Series Multiservice
Edge Routers, MX Series Ethernet Service Routers, and T Series Core
Routers .....................................................................................................6
New Features in JUNOS Release 10.1 for M Series, MX Series, and T
Series Routers ....................................................................................6
Class of Service ..................................................................................6
High Availability ...............................................................................12
Interfaces and Chassis ......................................................................12
JUNOS XML API and Scripting ..........................................................18
MPLS Applications ............................................................................21
Multiplay ..........................................................................................22
Routing Policy and Firewall Filters ....................................................23
Routing Protocols .............................................................................24
Services Applications ........................................................................27
Subscriber Access Management .......................................................27
System Logging ................................................................................36
■1

User Interface and Configuration ......................................................38
Changes in Default Behavior and Syntax in JUNOS Release 10.1 for M
Series, MX Series, and T Series Routers ............................................42
Class of Service ................................................................................42
Forwarding and Sampling ................................................................42
Interfaces and Chassis ......................................................................42
Layer 2 Ethernet Services .................................................................46
MPLS Applications ............................................................................46
Multiplay ..........................................................................................47
Routing Policy and Firewall Filters ....................................................47
Routing Protocols .............................................................................47
Services Applications ........................................................................48
Subscriber Access Management .......................................................50
User Interface and Configuration ......................................................51
VPNs ................................................................................................52
Issues in JUNOS Release 10.1 for M Series, MX Series, and T Series
Routers .............................................................................................54
Current Software Release .................................................................54
Previous Releases .............................................................................73
Errata and Changes in Documentation for JUNOS Software Release 10.1
for M Series, MX Series, and T Series Routers ..................................94
Changes to the JUNOS Documentation Set .......................................94
Errata ...............................................................................................94
Upgrade and Downgrade Instructions for JUNOS Release 10.1 for M
Series, MX Series, and T Series Routers ............................................98
Basic Procedure for Upgrading to Release 10.1 ................................98
Upgrading a Router with Redundant Routing Engines ....................101
Upgrading Juniper Routers Running Draft-Rosen Multicast VPN to
JUNOS Release 10.1 .................................................................101
Upgrading the Software for a Routing Matrix .................................103
Upgrading Using ISSU .....................................................................104
Upgrading from JUNOS Release 9.2 or Earlier on a Router Enabled
for Both PIM and NSR ..............................................................104
Downgrade from Release 10.1 .......................................................105
JUNOS Software Release Notes for Juniper Networks SRX Series Services
Gateways and J Series Services Routers ................................................107
New Features in JUNOS Release 10.1 for SRX Series Services Gateways
and J Series Services Routers ..........................................................107
Software Features ...........................................................................108
Hardware Features .........................................................................122
Changes In Default Behavior and Syntax in JUNOS Release 10.1 for SRX
Series Services Gateways and J Series Services Routers ..................123
Application Layer Gateways (ALGs) ................................................123
Chassis Cluster ...............................................................................124
Command-Line Interface (CLI) ........................................................125
Configuration .................................................................................127
Flow and Processing .......................................................................128
Interfaces and Routing ...................................................................129
Intrusion Detection and Prevention (IDP) .......................................129
J-Web .............................................................................................130
Management and Administration ...................................................130
2■
JUNOS 10.1 Software Release Notes

Security ..........................................................................................131
WLAN .............................................................................................131
Known Limitations in JUNOS Release 10.1 for SRX Series Services
Gateways and J Series Services Routers ..........................................132
[accounting-options] Hierarchy ......................................................132
AX411 Access Point .......................................................................132
Chassis Cluster ...............................................................................132
Command-Line Interface (CLI) ........................................................133
Dynamic VPN .................................................................................134
Flow and Processing .......................................................................134
Hardware .......................................................................................135
Interfaces and Routing ...................................................................136
Intrusion Detection and Prevention (IDP) .......................................138
J-Web .............................................................................................139
NetScreen-Remote ..........................................................................140
Network Address Translation (NAT) ................................................140
Performance ..................................................................................141
SNMP .............................................................................................141
System ...........................................................................................141
Unified Threat Management (UTM) ................................................141
VPNs ..............................................................................................141
WLAN .............................................................................................141
Issues in JUNOS Release 10.1 for SRX Series Services Gateways and J
Series Services Routers ...................................................................142
Outstanding Issues In JUNOS Release 10.1 for SRX Series Services
Gateways and J Series Services Routers ...................................142
Resolved Issues in JUNOS Release 10.1 for SRX Series Services
Gateways and J Series Services Routers ...................................162
Errata and Changes in Documentation for JUNOS Release 10.1 for SRX
Series Services Gateways and J Series Services Routers ..................165
Application Layer Gateways (ALGs) ................................................165
Attack Detection and Prevention ....................................................165
CLI Reference .................................................................................166
Command-Line Interface (CLI) ........................................................166
CompactFlash Card Support ...........................................................166
Flow and Processing .......................................................................166
Hardware Documentation ..............................................................167
Installing Software Packages ..........................................................168
Integrated Convergence Services ....................................................169
Interfaces and Routing ...................................................................169
Intrusion Detection and Prevention (IDP) .......................................170
J-Web .............................................................................................172
Screens ...........................................................................................172
Hardware Requirements for JUNOS Release 10.1 for SRX Series Services
Gateways and J Series Services Routers ..........................................172
Transceiver Compatibility for SRX Series and J Series Devices .......173
Power and Heat Dissipation Requirements for J Series PIMs ..........173
Supported Third-Party Hardware for J Series Services Routers .......173
J Series CompactFlash and Memory Requirements ........................174
■3

Dual-Root Partitioning Scheme Documentation for SRX Series Services
Gateways ........................................................................................175
Dual-Root Partitioning Scheme .......................................................175
Maximizing ALG Sessions .....................................................................183
Using Dual Chassis Cluster Control Links: Upgrade Instructions for the
Second Routing Engine ..................................................................184
Upgrade and Downgrade Instructions for JUNOS Release 10.1 for SRX
Series Services Gateways and J Series Services Routers ..................185
JUNOS Software Release Notes for EX Series Switches ................................186
New Features in JUNOS Release 10.1 for EX Series Switches ................186
Hardware .......................................................................................187
Access Control and Port Security ....................................................187
Bridging, VLANs, and Spanning Trees ............................................187
Class of Service (CoS) .....................................................................188
Infrastructure .................................................................................188
Interfaces .......................................................................................188
Layer 2 and Layer 3 Protocols ........................................................188
Management and RMON ................................................................188
MPLS ..............................................................................................189
Packet Filters ..................................................................................189
Changes in Default Behavior and Syntax in JUNOS Release 10.1 for EX
Series Switches ...............................................................................189
Layer 2 and Layer 3 Protocols ........................................................190
Infrastructure .................................................................................190
User Interface and Configuration ....................................................190
Limitations in JUNOS Release 10.1 for EX Series Switches ....................190
Access Control and Security ...........................................................191
Class of Service ..............................................................................191
Firewall Filters ................................................................................191
Infrastructure .................................................................................191
Interfaces .......................................................................................192
Outstanding Issues in JUNOS Release 10.1 for EX Series Switches ........193
Access Control and Port Security ....................................................193
Bridging, VLANs, and Spanning Trees ............................................193
Class of Service ..............................................................................193
Infrastructure .................................................................................194
Interfaces .......................................................................................194
J-Web Interface ...............................................................................194
Resolved Issues in JUNOS Release 10.1 for EX Series Switches .............196
Access Control and Port Security ....................................................196
Bridging, VLANs, and Spanning Trees ............................................196
Class of Service ..............................................................................197
Firewall Filters ................................................................................197
Hardware .......................................................................................197
Infrastructure .................................................................................197
J-Web Interface ...............................................................................198
Errata in Documentation for JUNOS Release 10.1 for EX Series
Switches .........................................................................................199
4■
JUNOS 10.1 Software Release Notes

Upgrade and Downgrade Issues for JUNOS Release 10.1 for EX Series
Switches .........................................................................................200
Upgrading or Downgrading from JUNOS Release 9.4R1 for EX Series
Switches ..................................................................................200
Upgrading from JUNOS Release 9.3R1 to Release 10.1 for EX Series
Switches ..................................................................................200
Upgrading from JUNOS Release 9.2 to Release 10.1 for EX Series
Switches ..................................................................................201
Downgrading from JUNOS Release 10.1 to Release 9.2 for EX4200
Switches ..................................................................................202
JUNOS Documentation and Release Notes ..................................................203
Documentation Feedback ............................................................................203
Requesting Technical Support .....................................................................203
Revision History ..........................................................................................205
■5

JUNOS Software Release Notes for Juniper Networks M Series Multiservice Edge
Routers, MX Series Ethernet Service Routers, and T Series Core Routers
■New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series
Routers on page 6
■Changes in Default Behavior and Syntax in JUNOS Release 10.1 for M Series,
MX Series, and T Series Routers on page 42
■Issues in JUNOS Release 10.1 for M Series, MX Series, and T Series
Routers on page 54
■Errata and Changes in Documentation for JUNOS Software Release 10.1 for M
Series, MX Series, and T Series Routers on page 94
■Upgrade and Downgrade Instructions for JUNOS Release 10.1 for M Series, MX
Series, and T Series Routers on page 98
New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers
The following features have been added to JUNOS Release 10.1. Following the
description is the title of the manual or manuals to consult for further information.
Class of Service
■Intelligent oversubscription service support (MX Series routers with Trio
MPC/MIC interfaces)—Arriving packets are assigned to one of two traffic classes
(control and best-effort) based on their header types and destination MAC address.
This allows for lower priority packets to be dropped more intelligently when
oversubscription occurs. Only packets mapped to queue 3 are marked as control
packets. Protocols such as telnet, FTP, and SSH that are mapped to queue 0 are
classified as best-effort. No configuration is necessary, but the queue assignments
can be altered with a multifield classifier.
[Class of Service]
■CoS aspects of the MPC/MIC (MX Series routers with Trio MPC/MIC
interfaces)—Cover all aspects of CoS configuration for this hardware combination.
Support includes shaping rates at the queue level, configurable bandwidth profiles
with percentages, dynamic bandwidth allocation among different services,
scheduler node scaling, and delay buffer allocation. To configure, include the
relevant statements at the [edit class-of-service] hierarchy level and apply them
if necessary at other hierarchy levels such as the [edit interfaces] hierarchy level.
[Class of Service, Network Interfaces]
■Per-priority shaping (MX Series platforms with Trio MPC/MIC
interfaces)—Enables you to configure a separate shaping rate for each of the
five priority levels so that higher priority services such as voice and video do not
starve lower priority services such as data. To configure, include the
shaping-rate-(excess | priority)-level rate [ burst-size burst ] statement at the [edit
class-of-service traffic-control-profiles tcp-name]hierarchy level and apply the traffic
control profile at the [edit interfaces] hierarchy level.
[Class of Service]
6■JUNOS Software Release Notes for Juniper Networks M Series Multiservice Edge Routers, MX Series Ethernet Service Routers,
and T Series Core Routers
JUNOS 10.1 Software Release Notes

■Distribute excess bandwidth among different services for a subscriber (MX
Series routers with Trio MPC/MIC interfaces)—Service providers often use
tiered services that must carry excess bandwidth as traffic patterns vary. By
default, excess bandwidth between a configured guaranteed rate and shaping
rate is shared equally among all queues, which might not be optimal for all
subscribers to a service. You can control the distribution of this excess bandwidth
with the excess-rate statement. To configure the excess rate for a traffic control
profile, include the excess-rate statement at the [edit class-of-service
traffic-control-profiles tcp-name]hierarchy level and apply the traffic control profile
at the [edit interfaces] hierarchy level. To configure the excess rate for a queue,
include the excess-rate and excess-priority statements at the [edit class-of-service
scheduler scheduler-name]hierarchy level.
[Class of Service]
■Scheduler node scaling (MX Series routers with Trio MPC/MIC interfaces)—The
hardware supports multiple levels of scheduler nodes. In per-unit-scheduling
mode, each logical interface (unit) can have four or eight queues and has a
dedicated level 3 scheduler node. The logical interfaces share a common level
2 node (one per port). In hierarchical-scheduling mode, a set of logical interfaces,
each with four or eight queues, has a level 2 CoS profile and one of its logical
interface children has a level 3 CoS profile. To better control system resources
in hierarchical-scheduling mode, you can limit the number of hierarchical levels
in the scheduling hierarchy to two. In this case, all logical interfaces and interface
sets with CoS profiles share a single (dummy) level 2 node, thereby increasing
the maximum number of logical interfaces with CoS profiles (the interface sets
must be at level 3). To configure scheduler node scaling, include the
maximum-hierarchy-levels statement at the [edit interfaces xe-fpc/pic/port
hierarchical-scheduler] hierarchy level. The only supported value is 2.
[Class of Service, Network Interfaces]
■Forwarding-class aliases (M320 and T Series routers)—Enable you to configure
up to 16 forwarding classes and 8 queues, with multiple forwarding classes
assigned to single queues. To configure, include the class and queue-num
statements at the [edit class-of-service forwarding-classes] hierarchy level.
[Class of Service]
■VLAN shaping on aggregate devices (MX Series routers with Trio MPC/MIC
interfaces)—VLAN shaping (per-unit scheduling) is supported on aggregated
Ethernet interfaces when link protection is enabled on the aggregated Ethernet
interface. When VLAN shaping is configured on aggregate Ethernet interfaces
with link protection enabled, the shaping is applied to the active child link. To
configure link protection on aggregated Ethernet interfaces, include the
link-protection statement at the [edit interfaces aexaggregated-ether-options]
hierarchy level. Traffic passes only through the designated primary link. This
includes transit traffic and locally generated traffic on the router. When the
primary link fails, traffic is routed through the backup link. You also can reverse
traffic, from the designated backup link to the designated primary link. To revert
back to sending traffic to the primary designated link when traffic is passing
through the designated backup link, use the revert command; for example, request
interfaces revert ae0. To configure a primary and a backup link, include the
primary and backup statements at the [edit interfaces ge-fpc/pic/port
gigether-options 802.3ad aex]hierarchy level or the [edit interfaces xe-fpc/pic/port
fastether-options 802.3ad aex]hierarchy level. To disable link protection, delete
New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers ■7
New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

the link-protection statement at the [edit interfaces aexaggregated-ether-options
link-protection] hierarchy level. To display the active, primary, and backup link
for an aggregated Ethernet interface, use the operational mode command show
interfaces redundancy aex.
[Class of Service, Network Interfaces]
■Re-marking of MVPN GRE encapsulation DCSP at ASBR (MX Series routers
with Trio MPC/MIC interfaces)—Enables you to configure DSCP marking for
GRE encapsulated packets that aligns with the service provider core CoS policy
for an MVPN. To configure, include the DSCP rewrite-rule dscp dscp-rule-name
with the values at the [edit class-of-service] hierarchy level and then apply the
rewrite rule to the core-facing multicast interface at the [edit class-of-service
interfaces] hierarchy level.
[Class of Service]
■PD-5-10XGE-SFPP, 10-port 10-Gigabit Ethernet (Type 4) PIC (T640, T1600,
and TX Matrix routers with G-FPC4, ST-FPC4, and ST-FPC4.1)—Supports a
WAN bandwidth of 100 Gbps in addition to the following features:
■Intelligent handling of oversubscribed traffic
■Line rate operation on up to five 10-Gigabit Ethernet ports
■Tap features, such as flexible encapsulation, source address (SA) MAC
learning, MAC accounting, and MAC policing
■Stacked virtual LAN (VLAN) tag and VLAN rewrite functionalities
[Network Interfaces, Class of Service, PIC Guide]
■Intelligent oversubscription services (MX Series with 16-port 10-Gigabit
Ethernet MPC with SFP+)—The 16-port 10-Gigabit Ethernet Modular Port
Concentrator (MPC) is an oversubscribed configuration. Consequently, it is
necessary to protect control traffic over best-effort traffic as soon as packets
enter the line card. To do this, packets entering the line card are assigned a
preclassifier control traffic class according to the header types (such as destination
MAC addresses, and Layer 4 ports) in the packet. The preclassifier provides a
good way to classify and queue important control traffic in a different high-priority
queue from that used for best-effort traffic.
The preclassifier (control or best effort) is assigned prior to packets being accepted
into the initial stream and is used by the line card as an early designation (before
any class-of-service configuration is applied). When oversubscription occurs,
control traffic will be queued separately and should not be subject to any dropped
packets.
The Layer 2 protocols supporting the preclassifier are:
■802.1ah
■802.1g
■802.1x
■802.3ad
■ARP
8■New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers
JUNOS 10.1 Software Release Notes

■GMRP
■GVRP
■LACP
■PVST
■xSTP
The Layer 3 protocols supporting the preclassifier are:
■IGMP
■IPv4/IPv6 ICMP
■IPv4/IPv6 ISIS
■IPv4/IPv6 OSPF
■IPv4/IPv6 PIM
■IPv4 Router Alert
■IPv4/IPv6 RSVP
■IPv4/IPv6 VRRP
The Layer 4 protocols supporting the preclassifier are:
■IIPv4/ IPv6 BGP
■IPv4/ IPv6 LDP
■IPv4 UDP/L2TP
■RIP (UDP port checks)
The preclassifier is also supported on label-switching encapsulation PPP.
[Class of Service]
■Feature support on 16-port 10-Gigabit Ethernet MPC with SFP+ (MX Series
routers)—The following features are supported on the 16-port 10-Gigabit Ethernet
MPC with SFP+:
■Accepts traffic destined for GRE tunnels or DVMRP (IP-in-IP) tunnels (JUNOS
Release 10.0R2)
■Bidirectional Forwarding Detection (BFD) protocol (JUNOS Release 10.0R2)
■Border Gateway Protocol (BGP) (JUNOS Release 10.0R2)
■BGP/Multiprotocol Label Switching (MPLS) virtual private networks (VPNs)
(JUNOS Release 10.0R2)
■Distance Vector Multicast Routing Protocol (DVMRP) and generic routing
encapsulation (GRE) support, access side and server side (JUNOS Release
10.0R2)
■Firewall filters (JUNOS Release 10.0R2)
New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers ■9
New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

■Flexible Ethernet encapsulation (JUNOS Release 10.0R2)
■Graceful Routing Engine switchover (GRES) (JUNOS Release 10.0R2)
■Ingress differentiated (JUNOS Release 10.0R2)
■Differentiated Services code point rewrite (DSCP) (JUNOS Release 10.0R2)
■Intelligent oversubscription (JUNOS Release 10.0R2)
■Integrated routing and bridging (IRB) (JUNOS Release 10.1R1)
■Intermediate System-to-Intermediate System (IS-IS) (JUNOS Release 10.0R2)
■Internet Group Management Protocol (IGMP) (excludes snooping) (JUNOS
Release 10.0R2)
■IPv4 (JUNOS Release 10.0R2)
■IP multicast (JUNOS Release 10.0R2)
■Label Distribution Protocol (LDP) (JUNOS Release 10.0R2)
■Labeled-switched path (LSP) accounting, policers, and filtering (JUNOS Release
10.0R2)
■LAN-PHY mode (JUNOS Release 10.0R2)
■Layer 2 frame filtering (JUNOS Release 10.0R2)
■IEEE 802.3ad link aggregation (JUNOS Release 10.0R2)
■Link Aggregation Control Protocol (LACP) (JUNOS Release 10.0R2)
■Local loopback (JUNOS Release 10.0R2)
■MAC learning, policing (JUNOS Release 10.0R2)
■Multiple tag protocol identifiers (TPIDs), accounting, and filtering (JUNOS
Release 10.0R2)
■Multiprotocol Label Switching (MPLS) (JUNOS Release 10.0R2)
■Nonstop active routing (NSR) (JUNOS Release 10.0R2)
■Multitopology routing (MTR) (JUNOS Release 10.0R2)
■Open Shortest Path First (OSPF) (JUNOS Release 10.0R2)
■Packet mirroring (JUNOS Release 10.0R2)
■Quality of service (QoS) per port: (JUNOS Release 10.0R2)
■Eight queues per port
■Excess-rate configuration at the traffic-control-profile level
■Excess-rate and excess-priority configuration at the queue level
■Shaping at the port level
10 ■New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers
JUNOS 10.1 Software Release Notes