Juniper JUNOS OS 10.4 - S REV 5 Instruction Manual

Junos®OS 10.4 Release Notes
Release 10.4R1
04 February 2011
Revision 5
These release notes accompany Release 10.4R1 of the Junos operating system (Junos
OS). They describe device documentation and known problems with the software. Junos
OS runs on all Juniper Networks M Series, MX Series, and T Series routing platforms, SRX
Series Services Gateways, J Series Services Routers, and EX Series Ethernet Switches.
You can also find these release notes on the Juniper Networks Junos OS Documentation
Web page, which is located at http://www.juniper.net/techpubs/software/junos.
Contents Junos OS Release Notes for Juniper Networks M Series Multiservice Edge Routers,
MX Series Ethernet Service Routers, and T Series Core Routers . . . . . . . . . . . . 6
New Features in Junos OS Release 10.4 for M Series, MX Series, and T Series
Routers.....................................................6
ClassofService..............................................6
InterfacesandChassis.........................................7
JunosOSXMLAPIandScripting................................13
Layer2EthernetServices......................................16
MPLSApplications...........................................16
Multicast ...................................................17
MXSeries...................................................17
Routing Policy and Firewall Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
RoutingProtocols............................................19
ServicesApplications.........................................21
SubscriberAccessManagement................................25
SystemLogging.............................................35
VPNs .....................................................36
Changes in Default Behavior and Syntax in Junos OS Release 10.4 for M
Series, MX Series, and T Series Routers . . . . . . . . . . . . . . . . . . . . . . . . . . 39
ClassofService.............................................39
ForwardingandSampling.....................................39
InterfacesandChassis.......................................39
JunosOSXMLAPIandScripting................................42
MPLS Application ...........................................43
PlatformandInfrastructure...................................44
RoutingProtocols...........................................44
1Copyright © 2011, Juniper Networks, Inc.

Services Applications ........................................45
SubscriberAccessManagement................................47
User Interface and Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
VPNs .....................................................50
Issues in Junos OS Release 10.4 for M Series, MX Series, and T Series
Routers ....................................................51
CurrentSoftwareRelease.....................................51
Previous Releases ...........................................63
Errata and Changes in Documentation for Junos OS Release 10.4 for M
Series, MX Series, and T Series Routers . . . . . . . . . . . . . . . . . . . . . . . . . . 73
Changes to the Junos OS Documentation Set . . . . . . . . . . . . . . . . . . . . . 73
Errata .....................................................75
Upgrade and Downgrade Instructions for Junos OS Release 10.4 for M Series,
MXSeries,andTSeriesRouters................................78
Basic Procedure for Upgrading to Release 10.4 . . . . . . . . . . . . . . . . . . . . 78
Upgrading a Router with Redundant Routing Engines . . . . . . . . . . . . . . . 81
Upgrading Juniper Network Routers Running Draft-Rosen Multicast
VPNtoJunosOSRelease10.1...............................81
Upgrading the Software for a Routing Matrix . . . . . . . . . . . . . . . . . . . . . . 83
UpgradingUsingISSU........................................84
Upgrading from Junos OS Release 9.2 or Earlier on a Router Enabled
forBothPIMandNSR....................................84
Upgrade Policy for Junos OS Extended End-Of-Life Releases . . . . . . . . 85
DowngradefromRelease10.4.................................86
Junos OS Release Notes for Juniper Networks SRX Series Services Gateways
andJSeriesServicesRouters......................................87
New Features in Junos OS Release 10.4 for SRX Series Services Gateways
andJSeriesServicesRouters..................................87
SoftwareFeatures...........................................88
Hardware Features—SRX210, SRX220, and SRX240 Services
Gateways .............................................109
Hardware Features—SRX220 Services Gateway with Power Over
Ethernet ...............................................110
Hardware Features—SRX1400 Services Gateway . . . . . . . . . . . . . . . . . . 113
Hardware Features—SRX3400 and SRX3600 Services Gateways . . . . 116
Advertising Bandwidth for Neighbors on a Broadcast Link Support . . . . . . . . 117
Group VPN Interoperability with Cisco’s GET VPN . . . . . . . . . . . . . . . . . . . . . 117
Changes in Default Behavior and Syntax in Junos OS Release 10.4 for SRX
Series Services Gateways and J Series Services Routers . . . . . . . . . . . . . 118
ApplicationIdentification.....................................119
Application Layer Gateways (ALGs) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120
AppSecure ................................................120
Command-LineInterface(CLI).................................121
Configuration ..............................................123
DynamicVPN..............................................124
FlowandProcessing.........................................124
Installation ................................................126
Integrated Convergence Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126
InterfacesandRouting.......................................126
Copyright © 2011, Juniper Networks, Inc.2
JUNOS OS 10.4 Release Notes

Intrusion Detection and Prevention (IDP) . . . . . . . . . . . . . . . . . . . . . . . . 127
J-Web ....................................................128
Management and Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130
Multilink ...................................................131
PoweroverEthernet(PoE)....................................132
Security ...................................................132
VirtualLANs(VLANs)........................................132
WirelessLAN(WLAN).......................................133
UnsupportedCLI...............................................133
Accounting-OptionsHierarchy.................................133
AX411AccessPointHierarchy..................................133
ChassisHierarchy...........................................133
Class-of-Service Hierarchy ...................................134
Ethernet-SwitchingHierarchy.................................134
FirewallHierarchy...........................................134
InterfacesCLIHierarchy......................................134
Protocols Hierarchy .........................................138
RoutingHierarchy...........................................139
Services Hierarchy ..........................................139
SNMPHierarchy............................................139
SystemHierarchy...........................................140
IPv6andMVPNCLI.........................................140
Known Limitations in Junos OS Release 10.4 for SRX Series Services
Gateways and J Series Services Routers . . . . . . . . . . . . . . . . . . . . . . . . . 142
AppSecure ................................................142
ChassisCluster.............................................142
Command-LineInterface(CLI)................................143
DOCSISMini-PIM...........................................144
Dynamic Host Configuration Protocol (DHCP) . . . . . . . . . . . . . . . . . . . . 144
DynamicVPN..............................................144
FlowandProcessing........................................144
Hardware .................................................145
InterfacesandRouting.......................................146
Intrusion Detection and Prevention (IDP) . . . . . . . . . . . . . . . . . . . . . . . . 148
IPv6support...............................................148
J-Web ....................................................148
NetScreen-Remote .........................................149
Network Address Translation (NAT) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149
Point-to-Point Protocol over Ethernet (PPPoE) . . . . . . . . . . . . . . . . . . . 150
Security...................................................150
SNMP ....................................................150
Switching .................................................150
Unified Threat Management (UTM) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151
VPNs .....................................................151
WirelessLAN(WLAN)........................................151
3Copyright © 2011, Juniper Networks, Inc.

Issues in Junos OS Release 10.4 for SRX Series Services Gateways and J
SeriesServicesRouters......................................152
Outstanding Issues In Junos OS Release 10.4 for SRX Series Services
Gateways and J Series Services Routers . . . . . . . . . . . . . . . . . . . . . 152
Resolved Issues in Junos OS Release 10.4 for SRX Series Services
Gateways and J Series Services Routers . . . . . . . . . . . . . . . . . . . . . 169
Errata and Changes in Documentation for Junos OS Release 10.4 for SRX
Series Services Gateways and J Series Services Routers . . . . . . . . . . . . 172
Changes to the Junos OS Documentation Set . . . . . . . . . . . . . . . . . . . . 172
Errata for the Junos OS Documentation . . . . . . . . . . . . . . . . . . . . . . . . . 173
Errata for the Junos OS Hardware Documentation . . . . . . . . . . . . . . . . . 179
Hardware Requirements for Junos OS Release 10.4 for SRX Series Services
Gateways and J Series Services Routers . . . . . . . . . . . . . . . . . . . . . . . . . 183
Transceiver Compatibility for SRX Series and J Series Devices . . . . . . . 183
Power and Heat Dissipation Requirements for J Series PIMs . . . . . . . . . 183
Supported Third-Party Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183
J Series CompactFlash and Memory Requirements . . . . . . . . . . . . . . . . 184
MaximizingALGSessions........................................185
Integrated Convergence Services Not Supported . . . . . . . . . . . . . . . . . . . . . 185
Upgrade and Downgrade Instructions for Junos OS Release 10.4 for SRX
Series Services Gateways and J Series Services Routers . . . . . . . . . . . . 186
Upgrade Policy for Junos OS Extended End-Of-Life Releases . . . . . . . . 186
Junos OS Release Notes for EX Series Switches . . . . . . . . . . . . . . . . . . . . . . . . . . 187
New Features in Junos OS Release 10.4 for EX Series Switches . . . . . . . . . . 187
Hardware .................................................187
Bridging, VLANs, and Spanning Trees . . . . . . . . . . . . . . . . . . . . . . . . . . . 188
ClassofService(CoS).......................................188
FibreChanneloverEthernet..................................188
HighAvailability............................................188
Infrastructure ..............................................188
ManagementandRMON.....................................188
PacketFilters..............................................189
VirtualChassis.............................................189
Changes in Default Behavior and Syntax in Junos OS Release 10.4 for EX
Series Switches ............................................189
Bridging, VLANs, and Spanning Trees . . . . . . . . . . . . . . . . . . . . . . . . . . . 189
ClassofService............................................189
Limitations in Junos OS Release 10.4 for EX Series Switches . . . . . . . . . . . . 190
Access Control and Port Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 190
Bridging, VLANs, and Spanning Trees . . . . . . . . . . . . . . . . . . . . . . . . . . . 190
ClassofService.............................................191
EthernetSwitching..........................................191
FirewallFilters..............................................191
Hardware..................................................191
HighAvailability............................................192
Infrastructure ..............................................192
Interfaces .................................................193
J-Web Interface ............................................194
SpanningTreeProtocols.....................................194
Copyright © 2011, Juniper Networks, Inc.4
JUNOS OS 10.4 Release Notes

VirtualChassis.............................................194
Outstanding Issues in Junos OS Release 10.4 for EX Series Switches . . . . . . 195
Access Control and Port Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195
Bridging, VLANs, and Spanning Trees . . . . . . . . . . . . . . . . . . . . . . . . . . . 195
EthernetSwitching..........................................195
Firewall Filters .............................................196
Hardware .................................................196
Infrastructure ..............................................196
J-WebInterface ............................................196
Layer2andLayer3Protocols.................................198
ManagementandRMON.....................................199
VirtualChassis.............................................199
Resolved Issues in Junos OS Release 10.4 for EX Series Switches . . . . . . . . 199
Access Control and Port Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 200
EthernetSwitching.........................................200
Hardware.................................................200
Infrastructure..............................................200
Interfaces .................................................201
J-WebInterface............................................202
Layer2andLayer3Protocols.................................203
ManagementandRMON....................................203
VirtualChassis.............................................203
Errata in Documentation for Junos OS Release 10.4 for EX Series
Switches .................................................203
J-WebInterface............................................203
VirtualChassis.............................................204
Upgrade and Downgrade Instructions for Junos OS Release 10.4 for EX
SeriesSwitches............................................204
UpgradingSoftware........................................204
Upgrade Policy for Junos OS Extended End-Of-Life Releases . . . . . . . 205
Upgrading or Downgrading from Junos OS Release 9.4R1 for EX Series
Switches..............................................206
Upgrading from Junos OS Release 9.3R1 to Release 10.4 for EX Series
Switches..............................................206
Junos OS Documentation and Release Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . 207
DocumentationFeedback...........................................207
RequestingTechnicalSupport........................................207
RevisionHistory...................................................209
5Copyright © 2011, Juniper Networks, Inc.

Junos OS Release Notes for Juniper Networks M Series Multiservice Edge Routers, MX
Series Ethernet Service Routers, and T Series Core Routers
•New Features in Junos OS Release 10.4 for M Series, MX Series, and T Series
Routers on page 6
•Changes in Default Behavior and Syntax in Junos OS Release 10.4 for M Series, MX
Series, and T Series Routers on page 39
•Issues in Junos OS Release 10.4 for M Series, MX Series, and T Series Routers on page 51
•Errata and Changes in Documentation for Junos OS Release 10.4 for M Series, MX
Series, and T Series Routers on page 73
•Upgrade and Downgrade Instructions for Junos OS Release 10.4 for M Series, MX Series,
and T Series Routers on page 78
New Features in Junos OS Release 10.4 for M Series, MX Series, and T Series Routers
The following features have been added to Junos OS Release 10.4. Following the
description is the title of the manual or manuals to consult for further information.
Class of Service
•Hierarchical policer functionality extended to Modular Interface Cards (MICs) (MX
Series routers)—Provides hierarchical policer feature parity with Enhanced Intelligent
Queuing (IQE) PICs. This is useful in provider edge applications using aggregate policing
for general traffic and when applying a separate policer for premium traffic on a logical
or physical interface.
Hierarchical policing on MICs supports the following features:
•Ingress traffic is first classified into premium and non-premium traffic before a policer
is applied.
•The hierarchical policer contains two policers: premium and aggregate.
Premium traffic is policed by both the premium policer and the aggregate policer. While
the premium policer rate-limits premium traffic, the aggregate policer only decrements
the credits but does not drop packets. Non-premium traffic is rate-limited by the
aggregate policer only, resulting in the following behavior:
•Premium traffic is assured to have the bandwidth configured for the premium policer.
•Non-premium traffic is policed to the specified rate limit.
For a list of supported MICs, refer to:
http://www.juniper.net/techpubs/en_US/release-independent/junos/topics/reference/
general/mic-mx-series-supported.html.
The logical-interface-policer and physical-interface-policer statements provide additional
hierarchical policer parameters beyond those of the IQE PICs.
You can apply the policer at the inet, inet6, or mpls family level, as follows:
[edit interfaces ge-0/1/0 unit 0 family (inet | inet6 | mpls)]
input-hierarchical-policer Test-HP;
Copyright © 2011, Juniper Networks, Inc.6
JUNOS OS 10.4 Release Notes

By making a hierarchical policer a logical-interface-policer, you can achieve aggregation
within a logical interface. A hierarchical policer configured as a physical-interface-policer
supports aggregation within a physical interface. Please note that you still apply the
hierarchical policer at the interface and traffic of the families that do not have the
hierarchical policer will be policer. This is different from IQE PICs, where you apply a
hierarchical policer at the logical or physical interface.
For hierarchical policing of all traffic through a logical interface, a hierarchical policer
can be made a logical-interface-policer and applied to all families in the logical interface.
Similarly, you can achieve aggregation at the physical interface level.
[Network Interfaces,Class of Service,Policy]
•DSCP classification for VPLS at the ingress PE (M320 with Enhanced Type III FPC
and M120)—Enables you to configure DSCP classification for VPLS at an ingress PE
for encapsulation types vlan-vpls (IQ2 or IQ2E PICs) or ATM II IQ PIC. To configure,
define the DSCP classifier at the [edit class-of-service classifiers dscp dscp-name]
hierarchy level and apply the DSCP classifier at the [edit interfaces at-fpc-pic-port
unit-logical-unit-number classifiers] hierarchy level. The ATM interface must be included
in the routing instance.
[Class of Service]
Interfaces and Chassis
•Extend support for 64-bit Junos OS to include RE-1800 Series Routing Engines
(M120, M320, MX960, MX480, and MX240 routers)—Supported Routing Engines
include:
•RE-1800x2-A—Supports 64-bit Junos OS on M120 and M320 routers.
•RE-1800x2-S—Supports 64-bit Junos OS on MX240, MX480, and MX960 routers.
•RE-1800x4-S—Supports 64-bit Junos OS on MX240, MX480, and MX960 routers.
[System Basics]
•Ethernet encapsulation for ATM scheduler (M7i, M10i, M120, and M320 [with
Enhanced III FPC] routers)—Enables support for the configuration of an ATM scheduler
map on an Ethernet VPLS over a bridged ATM interface.
[Network Interfaces]
•Synchronous Ethernet (SyncE) on MX80 routers and MX Series routers with
MPCs—Supports the Ethernet synchronization messaging channel (ESMC), G.8264-like
clock selection mechanism, and external clocking on MX80 routers and MX Series
routers with MPCs. Wireless backhaul and wireline transport services are the primary
applications for these features.
The following features are supported:
•On MX80 routers and MX Series routers, MPCs based on G.8261 and G.8262. This
feature does not work on the fixed configuration version of the MX80 routers.
•All Ethernet type ports are supported on MX80 routers and MX Series routers with
MPCs
7Copyright © 2011, Juniper Networks, Inc.
New Features in Junos OS Release 10.4 for M Series, MX Series, and T Series Routers

•ESMC support as per G.8264
•CLI command selection of clock sources
•Monitoring clock sources (maximum of two clock sources can be monitored
simultaneously)
•Revertive and nonrevertive modes
To configure SyncE, include the synchronization statement and its substatements at
the [edit chassis] hierarchy level.
[Network Interfaces,Interfaces Command Reference]
•Enhanced container interface allows ATM children for containers—M Series and T
Series routers with ATM2 PICs automatically copy the parent container interface
configuration to the children interfaces. Container interfaces do not go down during
APS switchovers, thereby shielding upper layers. This feature allows the various ATM
features to work over the container ATM for APS.
To specify ATM children within a container interface, use the container-list cinstatement
and (primary | standby) option at the [edit interface at-fpc/pic/slot container] hierarchy
level.
To configure a container interface, including its children, use the cinstatement and its
options at the [edit interface ci-n]hierarchy level.
Container ATM APS does not support inter-chassis APS. MLPPP over ATM CI is also
not supported.
[Network Interfaces]
•Signaling neighboring routers of fabric down on T1600 and T640 routers—The
signaling of neighboring routers is supported when a T640 or T1600 router is unable
to carry traffic due to all fabric planes being taken offline for one of the following
reasons:
•CLI or offline button pressed
•Automatically taken offline by the SPMB due to high temperature.
•PIO errors and voltage errors detected by the SPMB CPU to the SIBs.
The following scenarios are not supported by this feature:
•All PFEs get destination errors on all planes to all destinations, even with the SIBs
staying online.
•Complete fabric loss caused by destination timeouts, with the SIBs still online.
When chassisd detects that all fabric planes are down, the router reboots all FPCs in
the system. When the FPCs come back up, the interfaces will not be created again,
since all fabric planes are down.
Once you diagnose and fix the cause of all fabric planes going down, you must then
bring the SIBs back online. Bringing the SIBs back online brings up the interfaces.
Copyright © 2011, Juniper Networks, Inc.8
JUNOS OS 10.4 Release Notes

Fabric down signaling to neighboring routers offers the following benefits:
•FPCs reboot when the control plane connection to the Routing Engine times out.
•Extends a simple approach to reboot FPCs when the dataplane blacks out.
When the router transitions from a state where SIBs are online or spare to a state where
there are no SIBs are online, then all the FPCs in the system are rebooted. An ERRMSG
indicates if all fabric planes are down, and the FPCs will reboot if any fabric planes do
not come up in 2 minutes.
An ERRMSG indicates the reason for FPC reboot on fabric connectivity loss.
The chassisd daemon traces when an FPC comes online, but a PIC attach is not done
because no fabric plane is present.
A CLI warning that the FPCs will reboot is issued when the last fabric plane is taken
offline.
You will need to bring the SIBs online after determining why the SIBs were not online.
When the first SIB goes online, and link training with the FPCs completes, the interfaces
will be created.
Fabric down signaling to neighboring routers functionality is available by default, and
no user configuration is required to enable it.
No new CLI commands or alarms are introduced for this feature. Alarms are already
implemented for when the SIBs are not online.
[Network Interfaces,System Basics]
•New enterprise-specific MIB to support digital optical monitoring (MX960, MX480,
MX240, and 10-Gigabit Ethernet LAN/WAN PIC with XFP on T640 and T1600
routers)—Junos OS Release 10.4 introduces JUNIPER-DOM-MIB, a new
enterprise-specific MIB to extend MIB support for digital optical monitoring.
JUNIPER-DOM-MIB supports the SNMP Get request for statistics and SNMP Trap
notifications for alarms.
JUNIPER-DOM-MIB is part of the JUNIPER-SMI MIB hierarchy level.
The following MIB objects are supported by JUNIPER-DOM-MIB for digital optical
monitoring:
•jnxDomCurrentTable
•jnxDomAlarmSet
•jnxDomAlarmCleared
[SNMP MIBs and Traps Reference]
•Transition of IPv4 traffic to IPv6 addresses using Dual Stack Lite (DS-Lite)—Adds
support for DS-Lite, a means for transitioning IPv4 traffic to IPv6 addresses. This
transition will become necessary as the supply of unique IPv4 addresses nears
exhaustion. New subscriber homes are allocated IPv6 addresses and IPv6-capable
equipment; DS-Lite provides a method for the private IPv4 addresses behind the IPv6
equipment to reach the IPv4 network. An IPv4 host communicates with a NAT endpoint
9Copyright © 2011, Juniper Networks, Inc.
New Features in Junos OS Release 10.4 for M Series, MX Series, and T Series Routers

over an IPv6 network using softwires. DS-Lite creates the IPv6 softwires that terminate
on the services PIC. Packets coming out of the softwire can then have other services
such as NAT applied on them.
[Services Interface,System Basics and Services Command Reference]
•Support for SONET/SDH OC48/STM16 Enhanced IQ (IQE) PIC with SFP (M320,
MX240, MX480, MX960, T640 and T1600 routers)Supports a 4-port SONET/SDH
OC48 Enhanced IQ (IQE) PIC (Type 3) with per data-link connection identifier (DLCI)
queuing. Supported FPCs include T640-FPC3-ES, M320-FPC3-E3, and MX-FPC3.
Class of service (CoS) enables enhanced egress queuing, buffering, and traffic shaping.
CoS supports eight queues per logical interface, a per-unit scheduler, and two shaping
rates: a Committed Information Rate (CIR) and Peak Information Rate (PIR) per
data-link connection identifier (DLCI). Other CoS features include, but are not restricted
to, sharing of excess bandwidth among logical interfaces, five levels of priorities
(including Strict High), ingress behavior aggregate (BA) classification, queue rate-limit
policer, ingress rewrite, egress rewrite, and a forwarding class to queue remapping per
DLCI.
The SONET/SDH OC48/STM 16 PIC supports CoS features similar to those in IQ2E
PICs, in terms of behavior and configuration statements. This PIC supports the following
Layer 2 protocols: PPP, Frame Relay, and Cisco HDLC encapsulations.
For more information, see the PC-4OC48-STM16-IQE-SFP documentation for your
router:
•SONET/SDH OC48/STM16 Enhanced IQ (IQE) PIC with SFP (T1600 Router)
•SONET/SDH OC48/STM16 Enhanced IQ (IQE) PIC with SFP (T640 Router)
•SONET/SDH OC48/STM16 Enhanced IQ (IQE) PIC with SFP (MX Series Routers)
•SONET/SDH OC48/STM16 Enhanced IQ (IQE) PIC with SFP (M320 Router)
[PIC Guide,Network Interfaces,Class of Service]
•IPv6 statistics from IQ2 and IQ2E PICs on M320 routers with Enhanced III FPCs and
T Series routers—Support statistical accounting for IPv6 traffic traversing the IQ2 and
IQ2E PICs on M320 routers with Enhanced III FPCs and T Series routers.
For IQ2 and IQ2E PIC interfaces, the IPv6 traffic that is reported will be the total statistics
(sum of local and transit IPv6 traffic) in the ingress and egress direction. The IPv6
traffic in the ingress direction will be accounted separately only if the IPv6 family is
configured for the logical interface.
Statistics are maintained for routed IPv6 packets in the egress direction.
Byte and packet counters are maintained in the ingress and egress direction.
Differences in IPv6 statistics for IQ2 interfaces and all other interfaces are as follows:
•IQ2 and IQ2E PIC interfaces report the total statistics for the IPv6 traffic. For other
interfaces, the transit statistics are reported.
•IQ2 and IQ2E PIC interfaces report all IPv6 traffic received on the logical interface.
For all other interfaces, only the routed traffic is accounted.
Copyright © 2011, Juniper Networks, Inc.10
JUNOS OS 10.4 Release Notes