Juniper JUNOS 10.1 - S REV 4 Release note

Juniper Networks® JUNOS® 10.1 Software

Release Notes

Release 10.1R2

13 May 2010

Revision 1

These release notes accompany Release 10.1R2 of the JUNOS Software. They describe

device documentation and known problems with the software. JUNOS Software runs

on all Juniper Networks M Series, MX Series, and T Series routing platforms, SRX

Series Services Gateways, J Series Services Routers, and EX Series Ethernet Switches.

You can also find these release notes on the Juniper Networks JUNOS Software

Documentation Web page, which is located at

http://www.juniper.net/techpubs/software/junos.

Contents

JUNOS Software Release Notes for Juniper Networks M Series Multiservice

Edge Routers, MX Series Ethernet Service Routers, and T Series Core

Routers .....................................................................................................6

New Features in JUNOS Release 10.1 for M Series, MX Series, and T

Series Routers ....................................................................................6

Class of Service ..................................................................................6

High Availability ...............................................................................12

Interfaces and Chassis ......................................................................12

JUNOS XML API and Scripting ..........................................................18

MPLS Applications ............................................................................21

Multiplay ..........................................................................................22

Routing Policy and Firewall Filters ....................................................23

Routing Protocols .............................................................................24

Services Applications ........................................................................27

Subscriber Access Management .......................................................27

System Logging ................................................................................36

■ 1

User Interface and Configuration ......................................................38

Changes in Default Behavior and Syntax in JUNOS Release 10.1 for M

Series, MX Series, and T Series Routers ............................................42

Class of Service ................................................................................42

Forwarding and Sampling ................................................................42

Interfaces and Chassis ......................................................................42

Layer 2 Ethernet Services .................................................................46

MPLS Applications ............................................................................46

Multiplay ..........................................................................................47

Routing Policy and Firewall Filters ....................................................47

Routing Protocols .............................................................................47

Services Applications ........................................................................48

Subscriber Access Management .......................................................50

User Interface and Configuration ......................................................51

VPNs ................................................................................................52

Issues in JUNOS Release 10.1 for M Series, MX Series, and T Series

Routers .............................................................................................54

Current Software Release .................................................................54

Previous Releases .............................................................................73

Errata and Changes in Documentation for JUNOS Software Release 10.1

for M Series, MX Series, and T Series Routers ..................................86

Changes to the JUNOS Documentation Set .......................................86

Errata ...............................................................................................86

Upgrade and Downgrade Instructions for JUNOS Release 10.1 for M

Series, MX Series, and T Series Routers ............................................89

Basic Procedure for Upgrading to Release 10.1 ................................90

Upgrading a Router with Redundant Routing Engines ......................92

Upgrading Juniper Routers Running Draft-Rosen Multicast VPN to

JUNOS Release 10.1 ...................................................................92

Upgrading the Software for a Routing Matrix ...................................94

Upgrading Using ISSU .......................................................................95

Upgrading from JUNOS Release 9.2 or Earlier on a Router Enabled

for Both PIM and NSR ................................................................95

Downgrade from Release 10.1 .........................................................96

JUNOS Software Release Notes for Juniper Networks SRX Series Services

Gateways and J Series Services Routers ..................................................98

New Features in JUNOS Release 10.1 for SRX Series Services Gateways

and J Series Services Routers ............................................................98

Software Features .............................................................................99

Hardware Features .........................................................................117

Changes In Default Behavior and Syntax in JUNOS Release 10.1 for SRX

Series Services Gateways and J Series Services Routers ..................117

Application Layer Gateways (ALGs) ................................................118

Chassis Cluster ...............................................................................118

Command-Line Interface (CLI) ........................................................119

Configuration .................................................................................122

Flow and Processing .......................................................................123

Interfaces and Routing ...................................................................124

Intrusion Detection and Prevention (IDP) .......................................124

J-Web .............................................................................................125

Management and Administration ...................................................125

2 ■

JUNOS 10.1 Software Release Notes

Security ..........................................................................................126

Known Limitations in JUNOS Release 10.1 for SRX Series Services

Gateways and J Series Services Routers ..........................................126

[accounting-options] Hierarchy ......................................................126

AX411 Access Point .......................................................................126

Chassis Cluster ...............................................................................126

Command-Line Interface (CLI) ........................................................128

Dynamic VPN .................................................................................128

Flow and Processing .......................................................................129

Hardware .......................................................................................129

Interfaces and Routing ...................................................................130

Intrusion Detection and Prevention (IDP) .......................................133

J-Web .............................................................................................134

NetScreen-Remote ..........................................................................135

Network Address Translation (NAT) ................................................135

Performance ..................................................................................136

SNMP .............................................................................................136

System ...........................................................................................136

Unified Threat Management (UTM) ................................................136

VPNs ..............................................................................................136

WLAN .............................................................................................136

Issues in JUNOS Release 10.1 for SRX Series Services Gateways and J

Series Services Routers ...................................................................137

Outstanding Issues In JUNOS Release 10.1 for SRX Series Services

Gateways and J Series Services Routers ...................................137

Resolved Issues in JUNOS Release 10.1 for SRX Series Services

Gateways and J Series Services Routers ...................................158

Errata and Changes in Documentation for JUNOS Release 10.1 for SRX

Series Services Gateways and J Series Services Routers ..................163

Application Layer Gateways (ALGs) ................................................163

Attack Detection and Prevention ....................................................163

CLI Reference .................................................................................164

Command-Line Interface (CLI) ........................................................164

CompactFlash Card Support ...........................................................164

Flow and Processing .......................................................................164

Hardware Documentation ..............................................................165

Installing Software Packages ..........................................................166

Integrated Convergence Services ....................................................167

Interfaces and Routing ...................................................................167

Intrusion Detection and Prevention (IDP) .......................................168

J-Web .............................................................................................170

Screens ...........................................................................................170

Hardware Requirements for JUNOS Release 10.1 for SRX Series Services

Gateways and J Series Services Routers ..........................................170

Transceiver Compatibility for SRX Series and J Series Devices .......171

Power and Heat Dissipation Requirements for J Series PIMs ..........171

Supported Third-Party Hardware for J Series Services Routers .......171

J Series CompactFlash and Memory Requirements ........................172

Dual-Root Partitioning Scheme Documentation for SRX Series Services

Gateways ........................................................................................173

Dual-Root Partitioning Scheme .......................................................173

■ 3

Maximizing ALG Sessions .....................................................................181

Using Dual Chassis Cluster Control Links: Upgrade Instructions for the

Second Routing Engine ..................................................................182

Upgrade and Downgrade Instructions for JUNOS Release 10.1 for SRX

Series Services Gateways and J Series Services Routers ..................183

JUNOS Software Release Notes for EX Series Switches ................................184

New Features in JUNOS Release 10.1 for EX Series Switches ................184

Hardware .......................................................................................184

Access Control and Port Security ....................................................185

Bridging, VLANs, and Spanning Trees ............................................185

Class of Service (CoS) .....................................................................186

Infrastructure .................................................................................186

Interfaces .......................................................................................186

Layer 2 and Layer 3 Protocols ........................................................186

Management and RMON ................................................................186

MPLS ..............................................................................................187

Packet Filters ..................................................................................187

Changes in Default Behavior and Syntax in JUNOS Release 10.1 for EX

Series Switches ...............................................................................187

Layer 2 and Layer 3 Protocols ........................................................188

Infrastructure .................................................................................188

User Interface and Configuration ....................................................188

Limitations in JUNOS Release 10.1 for EX Series Switches ....................188

Access Control and Security ...........................................................189

Class of Service ..............................................................................189

Firewall Filters ................................................................................189

Infrastructure .................................................................................189

Interfaces .......................................................................................190

Outstanding Issues in JUNOS Release 10.1 for EX Series Switches ........191

Access Control and Port Security ....................................................191

Bridging, VLANs, and Spanning Trees ............................................191

Class of Service ..............................................................................192

Firewall Filters ................................................................................192

Infrastructure .................................................................................192

Interfaces .......................................................................................193

J-Web Interface ...............................................................................193

Resolved Issues in JUNOS Release 10.1 for EX Series Switches .............194

Access Control and Port Security ....................................................194

Bridging, VLANs, and Spanning Trees ............................................194

Class of Service ..............................................................................195

Firewall Filters ................................................................................195

Hardware .......................................................................................196

Infrastructure .................................................................................196

J-Web Interface ...............................................................................197

Errata in Documentation for JUNOS Release 10.1 for EX Series

Switches .........................................................................................198

4 ■

JUNOS 10.1 Software Release Notes

Upgrade and Downgrade Issues for JUNOS Release 10.1 for EX Series

Switches .........................................................................................198

Upgrading or Downgrading from JUNOS Release 9.4R1 for EX Series

Switches ..................................................................................198

Upgrading from JUNOS Release 9.3R1 to Release 10.1 for EX Series

Switches ..................................................................................199

Upgrading from JUNOS Release 9.2 to Release 10.1 for EX Series

Switches ..................................................................................199

Downgrading from JUNOS Release 10.1 to Release 9.2 for EX4200

Switches ..................................................................................200

JUNOS Documentation and Release Notes ..................................................202

Documentation Feedback ............................................................................202

Requesting Technical Support .....................................................................202

Revision History ..........................................................................................204

■ 5

JUNOS Software Release Notes for Juniper Networks M Series Multiservice Edge

Routers, MX Series Ethernet Service Routers, and T Series Core Routers

■ New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series

Routers on page 6

■ Changes in Default Behavior and Syntax in JUNOS Release 10.1 for M Series,

MX Series, and T Series Routers on page 42

■ Issues in JUNOS Release 10.1 for M Series, MX Series, and T Series

Routers on page 54

■ Errata and Changes in Documentation for JUNOS Software Release 10.1 for M

Series, MX Series, and T Series Routers on page 86

■ Upgrade and Downgrade Instructions for JUNOS Release 10.1 for M Series, MX

Series, and T Series Routers on page 89

New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

The following features have been added to JUNOS Release 10.1. Following the

description is the title of the manual or manuals to consult for further information.

Class of Service

■ Intelligent oversubscription service support (MX Series routers with Trio

MPC/MIC interfaces)—Arriving packets are assigned to one of two traffic classes

(control and best-effort) based on their header types and destination MAC address.

This allows for lower priority packets to be dropped more intelligently when

oversubscription occurs. Only packets mapped to queue 3 are marked as control

packets. Protocols such as telnet, FTP, and SSH that are mapped to queue 0 are

classified as best-effort. No configuration is necessary, but the queue assignments

can be altered with a multifield classifier.

[Class of Service]

■ CoS aspects of the MPC/MIC (MX Series routers with Trio MPC/MIC

interfaces)—Cover all aspects of CoS configuration for this hardware combination.

Support includes shaping rates at the queue level, configurable bandwidth profiles

with percentages, dynamic bandwidth allocation among different services,

scheduler node scaling, and delay buffer allocation. To configure, include the

relevant statements at the [edit class-of-service] hierarchy level and apply them

if necessary at other hierarchy levels such as the [edit interfaces] hierarchy level.

[Class of Service, Network Interfaces]

■ Per-priority shaping (MX Series platforms with Trio MPC/MIC

interfaces)—Enables you to configure a separate shaping rate for each of the

five priority levels so that higher priority services such as voice and video do not

starve lower priority services such as data. To configure, include the

shaping-rate-(excess | priority)-level rate [ burst-size burst ] statement at the [edit

class-of-service traffic-control-profiles tcp-name] hierarchy level and apply the traffic

control profile at the [edit interfaces] hierarchy level.

[Class of Service]

6 ■ JUNOS Software Release Notes for Juniper Networks M Series Multiservice Edge Routers, MX Series Ethernet Service Routers,

and T Series Core Routers

JUNOS 10.1 Software Release Notes

■ Distribute excess bandwidth among different services for a subscriber (MX

Series routers with Trio MPC/MIC interfaces)—Service providers often use

tiered services that must carry excess bandwidth as traffic patterns vary. By

default, excess bandwidth between a configured guaranteed rate and shaping

rate is shared equally among all queues, which might not be optimal for all

subscribers to a service. You can control the distribution of this excess bandwidth

with the excess-rate statement. To configure the excess rate for a traffic control

profile, include the excess-rate statement at the [edit class-of-service

traffic-control-profiles tcp-name] hierarchy level and apply the traffic control profile

at the [edit interfaces] hierarchy level. To configure the excess rate for a queue,

include the excess-rate and excess-priority statements at the [edit class-of-service

scheduler scheduler-name] hierarchy level.

[Class of Service]

■ Scheduler node scaling (MX Series routers with Trio MPC/MIC interfaces)—The

hardware supports multiple levels of scheduler nodes. In per-unit-scheduling

mode, each logical interface (unit) can have four or eight queues and has a

dedicated level 3 scheduler node. The logical interfaces share a common level

2 node (one per port). In hierarchical-scheduling mode, a set of logical interfaces,

each with four or eight queues, has a level 2 CoS profile and one of its logical

interface children has a level 3 CoS profile. To better control system resources

in hierarchical-scheduling mode, you can limit the number of hierarchical levels

in the scheduling hierarchy to two. In this case, all logical interfaces and interface

sets with CoS profiles share a single (dummy) level 2 node, thereby increasing

the maximum number of logical interfaces with CoS profiles (the interface sets

must be at level 3). To configure scheduler node scaling, include the

maximum-hierarchy-levels statement at the [edit interfaces xe-fpc/pic/port

hierarchical-scheduler] hierarchy level. The only supported value is 2.

[Class of Service, Network Interfaces]

■ Forwarding-class aliases (M320 and T Series routers)—Enable you to configure

up to 16 forwarding classes and 8 queues, with multiple forwarding classes

assigned to single queues. To configure, include the class and queue-num

statements at the [edit class-of-service forwarding-classes] hierarchy level.

[Class of Service]

■ VLAN shaping on aggregate devices (MX Series routers with Trio MPC/MIC

interfaces)—VLAN shaping (per-unit scheduling) is supported on aggregated

Ethernet interfaces when link protection is enabled on the aggregated Ethernet

interface. When VLAN shaping is configured on aggregate Ethernet interfaces

with link protection enabled, the shaping is applied to the active child link. To

configure link protection on aggregated Ethernet interfaces, include the

link-protection statement at the [edit interfaces aex aggregated-ether-options]

hierarchy level. Traffic passes only through the designated primary link. This

includes transit traffic and locally generated traffic on the router. When the

primary link fails, traffic is routed through the backup link. You also can reverse

traffic, from the designated backup link to the designated primary link. To revert

back to sending traffic to the primary designated link when traffic is passing

through the designated backup link, use the revert command; for example, request

interfaces revert ae0. To configure a primary and a backup link, include the

primary and backup statements at the [edit interfaces ge-fpc/pic/port

gigether-options 802.3ad aex] hierarchy level or the [edit interfaces xe-fpc/pic/port

fastether-options 802.3ad aex] hierarchy level. To disable link protection, delete

New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers ■ 7

New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

the link-protection statement at the [edit interfaces aex aggregated-ether-options

link-protection] hierarchy level. To display the active, primary, and backup link

for an aggregated Ethernet interface, use the operational mode command show

interfaces redundancy aex.

[Class of Service, Network Interfaces]

■ Re-marking of MVPN GRE encapsulation DCSP at ASBR (MX Series routers

with Trio MPC/MIC interfaces)—Enables you to configure DSCP marking for

GRE encapsulated packets that aligns with the service provider core CoS policy

for an MVPN. To configure, include the DSCP rewrite-rule dscp dscp-rule-name

with the values at the [edit class-of-service] hierarchy level and then apply the

rewrite rule to the core-facing multicast interface at the [edit class-of-service

interfaces] hierarchy level.

[Class of Service]

■ PD-5-10XGE-SFPP, 10-port 10-Gigabit Ethernet (Type 4) PIC (T640, T1600,

and TX Matrix routers with G-FPC4, ST-FPC4, and ST-FPC4.1)—Supports a

WAN bandwidth of 100 Gbps in addition to the following features:

■ Intelligent handling of oversubscribed traffic

■ Line rate operation on up to five 10-Gigabit Ethernet ports

■ Tap features, such as flexible encapsulation, source address (SA) MAC

learning, MAC accounting, and MAC policing

■ Stacked virtual LAN (VLAN) tag and VLAN rewrite functionalities

[Network Interfaces, Class of Service, PIC Guide]

■ Intelligent oversubscription services (MX Series with 16-port 10-Gigabit

Ethernet MPC with SFP+)—The 16-port 10-Gigabit Ethernet Modular Port

Concentrator (MPC) is an oversubscribed configuration. Consequently, it is

necessary to protect control traffic over best-effort traffic as soon as packets

enter the line card. To do this, packets entering the line card are assigned a

preclassifier control traffic class according to the header types (such as destination

MAC addresses, and Layer 4 ports) in the packet. The preclassifier provides a

good way to classify and queue important control traffic in a different high-priority

queue from that used for best-effort traffic.

The preclassifier (control or best effort) is assigned prior to packets being accepted

into the initial stream and is used by the line card as an early designation (before

any class-of-service configuration is applied). When oversubscription occurs,

control traffic will be queued separately and should not be subject to any dropped

packets.

The Layer 2 protocols supporting the preclassifier are:

■ 802.1ah

■ 802.1g

■ 802.1x

■ 802.3ad

■ ARP

8 ■ New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

JUNOS 10.1 Software Release Notes

■ GMRP

■ GVRP

■ LACP

■ PVST

■ xSTP

The Layer 3 protocols supporting the preclassifier are:

■ IGMP

■ IPv4/IPv6 ICMP

■ IPv4/IPv6 ISIS

■ IPv4/IPv6 OSPF

■ IPv4/IPv6 PIM

■ IPv4 Router Alert

■ IPv4/IPv6 RSVP

■ IPv4/IPv6 VRRP

The Layer 4 protocols supporting the preclassifier are:

■ IIPv4/ IPv6 BGP

■ IPv4/ IPv6 LDP

■ IPv4 UDP/L2TP

■ RIP (UDP port checks)

The preclassifier is also supported on label-switching encapsulation PPP.

[Class of Service]

■ Feature support on 16-port 10-Gigabit Ethernet MPC with SFP+ (MX Series

routers)—The following features are supported on the 16-port 10-Gigabit Ethernet

MPC with SFP+:

■ Accepts traffic destined for GRE tunnels or DVMRP (IP-in-IP) tunnels (JUNOS

Release 10.0R2)

■ Bidirectional Forwarding Detection (BFD) protocol (JUNOS Release 10.0R2)

■ Border Gateway Protocol (BGP) (JUNOS Release 10.0R2)

■ BGP/Multiprotocol Label Switching (MPLS) virtual private networks (VPNs)

(JUNOS Release 10.0R2)

■ Distance Vector Multicast Routing Protocol (DVMRP) and generic routing

encapsulation (GRE) support, access side and server side (JUNOS Release

10.0R2)

■ Firewall filters (JUNOS Release 10.0R2)

New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers ■ 9

New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

■ Flexible Ethernet encapsulation (JUNOS Release 10.0R2)

■ Graceful Routing Engine switchover (GRES) (JUNOS Release 10.0R2)

■ Ingress differentiated (JUNOS Release 10.0R2)

■ Differentiated Services code point rewrite (DSCP) (JUNOS Release 10.0R2)

■ Intelligent oversubscription (JUNOS Release 10.0R2)

■ Integrated routing and bridging (IRB) (JUNOS Release 10.1R1)

■ Intermediate System-to-Intermediate System (IS-IS) (JUNOS Release 10.0R2)

■ Internet Group Management Protocol (IGMP) (excludes snooping) (JUNOS

Release 10.0R2)

■ IPv4 (JUNOS Release 10.0R2)

■ IP multicast (JUNOS Release 10.0R2)

■ Label Distribution Protocol (LDP) (JUNOS Release 10.0R2)

■ Labeled-switched path (LSP) accounting, policers, and filtering (JUNOS Release

10.0R2)

■ LAN-PHY mode (JUNOS Release 10.0R2)

■ Layer 2 frame filtering (JUNOS Release 10.0R2)

■ IEEE 802.3ad link aggregation (JUNOS Release 10.0R2)

■ Link Aggregation Control Protocol (LACP) (JUNOS Release 10.0R2)

■ Local loopback (JUNOS Release 10.0R2)

■ MAC learning, policing (JUNOS Release 10.0R2)

■ Multiple tag protocol identifiers (TPIDs), accounting, and filtering (JUNOS

Release 10.0R2)

■ Multiprotocol Label Switching (MPLS) (JUNOS Release 10.0R2)

■ Nonstop active routing (NSR) (JUNOS Release 10.0R2)

■ Multitopology routing (MTR) (JUNOS Release 10.0R2)

■ Open Shortest Path First (OSPF) (JUNOS Release 10.0R2)

■ Packet mirroring (JUNOS Release 10.0R2)

■ Quality of service (QoS) per port: (JUNOS Release 10.0R2)

■ Eight queues per port

■ Excess-rate configuration at the traffic-control-profile level

■ Excess-rate and excess-priority configuration at the queue level

■ Shaping at the port level

10 ■ New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

JUNOS 10.1 Software Release Notes

■ Shaping at the queue level

■ Scheduling of queues based on weighted round-robin (WRR) per priority

class

■ Tricolor marking

■ Weighted random early detection (WRED)

■ QoS per virtual LAN (VLAN): (JUNOS Release 10.0R2)

■ Accounting, filtering, and policing

■ IEEE 802.1p rewrite

■ Classification

■ Excess-rate configuration at the traffic-control-profile level

■ Tricolor marking

■ Resource Reservation Protocol (RSVP) (JUNOS Release 10.0R2)

■ Routing Information Protocol (RIP) (JUNOS Release 10.0R2)

■ Simple Network Management Protocol (SNMP) (JUNOS Release 10.0R2)

■ IEEE 802.1Q VLANs: (JUNOS Release 10.0R2)

■ VLAN stacking and rewriting

■ Channels defined by two stacked VLAN tags

■ Flexible VLAN tagging

■ IP service for nonstandard TPID and stacked VLAN tags

■ Virtual private LAN service (VPLS) (JUNOS Release 10.0R2)

■ Virtual private network (VPN) (JUNOS Release 10.0R2)

■ Virtual Router Redundancy Protocol (VRRP) for IPv4 (JUNOS Release 10.0R2)

To support these features, some modifications have been made to the following

configuration statements:

■ The ability to configure the DSCP as the action of a filter rule is already

present in the JUNOS Software. However, with this line card, the value range

permitted is modified from 0, to 0 through 63. To include DSCP as the action

of a filter rule, include the dscp value parameter at the [edit firewall filter

filter-name] hierarchy level.

■ To fully leverage the features offered through the new chipset on the line

card, include the enhanced-hash-key option at the [edit forwarding-options]

hierarchy level.

[Class of Service]

New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers ■ 11

New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

■ IEEE 802.1ak-2007 MVRP (MX Series routers)—The Multiple VLAN Registration

Protocol (MVRP) is a standards-based Layer 2 network protocol used among

switches to dynamically share and update VLAN information with other bridges.

VLAN information exchanged includes:

■ The set of VLANs that currently have active members

■ The ports through which the active members can be reached

To operate MVRP, edge ports should have the static VLAN configuration. The

edge ports will not be configured for MVRP. MVRP is only enabled on the

core-facing trunk ports where no static VLANs are configured.

To configure MVRP, include the mvrp statement and desired options at the [edit

protocols] hierarchy level.

[Class of Service]

■ Elevated packet drops during oversubscription (MX Series routers with Trio

MPC/MIC interfaces)—During periods of oversubscription, the WRED process

drops more packets than expected from relatively full queues. There is no

configuration for this feature, which transparently applies scaling to

oversubscribed queues.

[Class of Service]

High Availability

■ Enhancements to unified ISSU support on PICs (T Series)—JUNOS Release 10.1

extends unified ISSU support for the following PICs to T Series routers:

■ PB-1CHOC12-STM4-IQE-SFP, 1-port channelized OC12/STM4 enhanced IQ

PIC

■ PB-1OC12-STM4-IQE-SFP, 1-port nonchannelized OC12/STM4 enhanced IQ

PIC

■ PB-4CHDS3-E3-IQE-BNC, 4-port channelized DS3/E3 enhanced IQ PIC

■ PB-4DS3-E3-IQE-BNC, 4-port non-channelized DS3/E3 enhanced IQ PIC

[High Availability]

Interfaces and Chassis

■ New 60-Gigabit Ethernet Queuing MPC (model number

MX-MPC2-3D-Q)—Supported on MX Series routers. For a list of supported MPCs,

see the MX Series Line Card Guide.

■ New 60-Gigabit Ethernet MPC (model number MX-MPC2-3D)—Supported on

MX Series routers. For a list of supported MPCs, see the MX Series Line Card

Guide.

■ New 60-Gigabit Ethernet Enhanced Queuing MPC (model number

MX-MPC2-3D-EQ)—Supported on MX Series routers. For a list of supported

MPCs, see the MX Series Line Card Guide.

12 ■ New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

JUNOS 10.1 Software Release Notes

■ New 20-port Gigabit Ethernet MIC with SFP (model number

MIC-3D-20GE-SFP)—Supported on MX Series routers. For a list of supported

MPCs, see the MX Series Line Card Guide.

■ New Modular Port Concentrators (MPCs) and Modular Interface Cards

(MICs)—Supported on MX Series platforms. Up to two MICs plug into the MPC

to provide the physical interface for the MPC line card. The MPCs provide

increased capacity on Gigabit Ethernet and 10-Gigabit Ethernet hardware. For a

list of supported MPCs and MICs, see the MX Series Line Card Guide.

[Network Interfaces]

■ New 4-port 10-Gigabit Ethernet MIC with XFP (model number

MIC-3D-4XGE-XFP)—Supported on MX Series routers. For a list of supported

MPCs, see the MX Series Line Card Guide.

■ Layer 2 VPLS, IRB, and mesh group feature parity (MX Series routers with

Trio MPC/MIC interfaces)—Support for Layer 2 feature parity with JUNOS Release

9.1 on MX Series routers that include Trio Modular Port Concentrators (MPCs)

and Modular Interface Cards (MICs).

Layer 2 feature parity includes:

■ Layer 2 bridging

■ VPLS forwarding

■ MAC address learning, aging, and MAC address limit

■ Mesh group support

■ Implicit VLAN mapping

■ Integrated routing and bridging (IRB)

■ Multicast over IRB

■ MAC statistics

Layer 2 features that are not supported in this release include:

■ Spanning Tree Protocols (xSTP)

■ VLAN Spanning Tree Protocol (VSTP)

■ Multiple Spanning Tree Protocol (MSTP)

■ Rapid Spanning Tree Protocol (RSTP)

■ Layer 2 Tunneling Protocol (L2TP)

■ Upgrading a T1600 router to be the LCC0 of the TX Matrix Plus platform—You

can now upgrade an operational T1600 router to be the lcc0 in a newly configured

TX Matrix Plus platform. The procedures require JUNOS Release 10.1 on the TX

Matrix Plus router and the T1600 router. Reboot is required to transfer control

of the T1600 router to the routing matrix. You can also downgrade the lcc0 to

a standalone T1600 router by rolling back to the former configuration. Upgrade

and integration of subsequent operational T1600 routers to form lcc1 and lcc2

New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers ■ 13

New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

(and so on) is not supported. Use the offline procedures to upgrade and integrate

the remaining T1600 routers into the routing matrix.

[TX Matrix Plus Hardware, System Basics and Services Command Reference]

■ Per-unit scheduling for GRE tunnels using IQ2 PICs (M7i, M10i, M120, and

M320 routers with E3–FPC)—Supports enhanced IQ2 PIC and IQ2E PIC

performance, adding all functionality of tunnel PICs. The QoS for the GRE tunnel

traffic will be applied as the traffic is looped through the IQ2/IQ2E PIC.

Shaping is performed on full packets that pass through the GRE tunnel.

IQ2 and IQ2E PICs support all interfaces that are supported on tunnel PICs, as

follows:

■

gr-fpc/pic/port

■

vt-fpc/pic/port

■

lt-fpc/pic/port

■

ip-fpc/pic/port

■

pe-fpc/pic/port

■

pd-fpc/pic/port

■

mt-fpc/pic/port

The port variable is always zero.

The provided tunnel functionality is the same as that of regular tunnel PICs.

When tunnel services are enabled on IQ2 and IQ2E PICs, they work exclusively

as tunnel PICs. The physical ports on the PICs cannot be used in tunnel mode.

To configure exclusive tunnel mode, use the tunnel-only statement at the [chassis

fpc number pic number] hierarchy level.

You can use the show interfaces queue gr-fpc/pic/port command to display

statistics for the specified tunnel.

[Network Interfaces, Class of Service, PIC Guide]

■ Root System Domain (RSD) configuration of logical interface filters on shared

interfaces (JCS1200 platform)—Enables Root System Domain (RSD) configuration

support for logical interface filters on shared interfaces. In previous releases,

logical interface filters were configured on each Protected System Domain (PSD).

This release supports configuration on the RSD.

To configure a logical interface filter on the RSD, apply the firewall filter to the

logical interface on the shared interface by including the filter output filter-name

statement at the [edit interfaces interface-name unit logical-unit-number] hierarchy

level on the RSD.

Filtering is performed on the PSD, but logical interface filters configured on the

RSD are applied automatically by the PSD. Filters configured on the RSD can

co-exist with filters configured on the PSD. Counter statistics related to PSD

filtering are available on the RSD.

[Protected System Domain]

14 ■ New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

JUNOS 10.1 Software Release Notes

■ Two new AC power supply modules in chassis—The JUNOS Software now

supports two new AC power supply modules on T640 and T1600 routers: AC

Power Entry Module 10kW US and AC Power Entry Module 10kW EMEA (for

U.S. and EMEA markets, respectively). The two Power Entry Modules (PEMs)

cannot interoperate and the JUNOS Software reports an alarm when they do.

The show chassis environment pem command output will show AC Input: status

instead of DC Input: status and the Temperature will show the actual temperature

reading. Two new power supply descriptions, US and EMEA, are added to

distinguish the new modules from existing ones in the output of the show chassis

hardware command output.

[System Basics and Service Command Reference]

■ Next-hop cloning and permutations disabled in T Series enhanced scaling

FPCs (FPC Type 1-ES, FPC Type 2-ES, FPC Type 3-ES, and FPC Type 4-ES)—The

next-hop cloning and permutations are now disabled in these FPCs with enhanced

load-balancing capability. As a result, the memory utilization is reduced for a

highly scaled system with a high number of next hops on ECMP or aggregated

interfaces.

[System Basics]

■ Fragmentation support for GRE-encapsulated packets (Multiservices DPC)

(M120, M7i/M10i with enhanced CFEB, M320 with E3 FPC, and MX Series

routers only)—Enables the Packet Forwarding Engine to update the IP

identification field in the outer IP header of packets encapsulated with generic

routing encapsulation (GRE), so that reassembly of the packets is possible after

fragmentation. The previous CLI constraint check that requires you to configure

either the clear-dont-fragment-bit statement or a tunnel key with the

allow-fragmentation statement is no longer enforced. There are no associated

changes to the CLI statements or operational mode commands.

NOTE: For other routers, the earlier configuration constraint check still holds.

[Services Interfaces, MPLS Applications, MX Series Layer 2 Configuration Guide]

■ NAT compliance enhancements—Add modifications to the existing NAT

functionality on the services PICs to achieve compliance with RFCs UDP 4787,

TCP 5382, and ICMP 5508. These enhancements apply to IPv4–IPv4, IPv6–IPv6,

and IPv4–IPv6 source NAT and are not supported with destination NAT. New

CLI configuration settings associated with RFC 4787 include the mapping-timeout

statement at the [edit services nat pool pool-name] hierarchy level and the

address-pooling, filtering-type, and mapping-type statements at the [edit services

nat rule rule-name term term-name then translated] hierarchy level. There are no

associated changes to the operational mode commands.

[Services Interfaces]

■ Support for VRF in Routing Engine-based sampling on M Series, M320, MX

Series, M120, and T Series routers—For VRF Routing Engine-based sampling,

the kernel queries the correct VRF route table based on the ingress interface

index for the received packet. For interfaces configured in VRF, the sampled

packets contain the correct input and output interface SNMP index, the source

and destination AS numbers, and the source and destination mask.

New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers ■ 15

New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

There are two ways to verify the sampled packets. The first is to include the file

sampled statement at the [edit forwarding-options sampling traceoptions] hierarchy

level and the local dump statement at the [edit forwarding-options family inet output

flow-server server] hierarchy level, and check the sampled file using the tail –f

/var/tmp/sampled command from the router shell. The second is to export and

verify the sampled packets to the flow-server.

[Services Interfaces, Feature Guide]

■ New 4-port Channelized OC12 Enhanced Intelligent Queuing (IQE) type 3

PIC (M Series and T Series routers)—Provides increased channelization and an

improved QoS model; with channelization capabilities and scaling that make it

ideal for edge aggregation.

Improved QoS functionality supports policing based on DSCP/IPPREC/EXP, five

priority levels, two shaping rates (CIR and PIR), option to use shared scheduling

on set of logical interfaces, DSCP rewrite on ingress, and configurable delay

buffers for queueing. The QoS capabilities provide service differentiation for

service providers.

The interface configuration syntax of existing IQ PICs is retained, but

configuration limits are changed to match the augmented capabilities of IQE

PICs.

All functionality available on the 4-port Channelized OC12 IQ Type 2 PIC is

supported by this PIC.

[Network Interfaces]

■ Enhanced Intelligent Queuing (IQE) PICs add support for T3 and T1

channelization under SDH framing (M40e, M120, and M320 with Sahara-FPC,

and T Series routers)—The following IQE PICs are supported:

■ 1-port COC48 IQE

■ 4-port COC12 IQE

■ 1-port COC12 IQE

■ 2-port COC3 IQE

The JUNOS Software supports T1 and CT1 interface types under CAU4. To

configure T1 and CT1 interfaces under CAU4, use the t1 and ct1 statements at

the [edit interfaces cau4-fpc/pic/port:unit partition number interface-type] hierarchy

level.

With T1 and CT1 interface configurations under CAU4 interfaces, you can

configure a maximum of 84 T1 or CT1 inerfaces. However, the partition range

under CAU4 interfaces was previously restricted to from 1 to 63. This range has

increased to from 1 to 84 for T1 and CT1 interfaces.

The JUNOS Software supports T1, CT1, T3, and CT3 interfaces under Channelized

AU4 partitions. To configure T1, CT1, T3, and CT3 interfaces under Channelized

AU4, use the ct1 and t1 statements at the [edit interfaces cau4-fpc/pic/port:unit

partition partition-number] hierarchy level or the ct3 and t3 statements at the [edit

interfaces cau4-fpc/pic/port:unit partition number interface-type] hierarchy level.

The JUNOS Software also supports M13 mapped T1 interfaces under CAU4. To

configure a T1 interface under CAU4, use the t1 statement at the [edit interfaces

16 ■ New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

JUNOS 10.1 Software Release Notes

cau4-fpc/pic/port:unit partition partition-number interface-type t1] or [edit interfaces

cau4-fpc/pic/port:unit partition partition-number interface-type ct1] hierarchy level.

The JUNOS Software does not allow combined configurations of E1 and E3

interfaces together under a CAU4 interface.

Similarly, you cannot mix T1, E1, T3, and E3 interfaces directly under CAU4.

NOTE: The TUG-3 partition is not supported.

ITU-T VT-mapping in combination with TUG3 partition is not supported.

[Network Interfaces, PIC Guide]

■ Stateful firewall chaining for FTP, TFTP, and RTSP data sessions (MX Series

routers with Multiservices DPCs, and M120 or M320 routers with Multiservices

400 PICs)—Adds support for stateful firewall rule sets in Dynamic Application

Awareness for JUNOS Software service chains. New application-level gateways

(ALGs) are available for FTP (junos-ftp), TFTP (junos-tftp), and RTSP (junos-rtsp);

you can include them as values for the applications statement at the [edit services

stateful-firewall rule rule-name term term-name from] hierarchy level. In addition,

you can include new statement options at the [edit interfaces ms-fpc/pic/port

services-options ignore-errors] hierarchy level to enable stateful firewall sessions

to operate in a no-drop mode and ignore various traffic errors that would normally

result in dropped packets. There are no CLI changes in the APPID, IDP, AACL,

or L-PDF configurations. The associated operational mode commands should

report the new applications when identified.

[Services Interfaces]

New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers ■ 17

New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

JUNOS XML API and Scripting

18 ■ New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

JUNOS 10.1 Software Release Notes

■ New JUNOS XML API operational request tag elements—Table 1 on page 19

lists the JUNOS Extensible Markup Language (XML) operational request tag

elements that are new in JUNOS Release 10.1, along with the corresponding CLI

command and response tag element for each one.

Table 1: JUNOS XML Tag Elements and CLI Command Equivalents New in JUNOS 10.1

Response Tag ElementCLI CommandRequest Tag Element

NONEclear dhcpv6 server binding<clear-dhcpv6-server-binding-information>

clear_dhcpv6_server_binding_information

NONEclear dhcpv6 server statistics<clear-dhcpv6-server-statistics-information>

clear_dhcpv6_server_statistics_information

NONEclear mpls static-lsp<clear-mpls-static-lsp-information>

clear_mpls_static_lsp_information

NONEclear mvrp statistics<clear-mvrp-interface-statistics>

clear_mvrp_interface_statistics

NONEclear security idp application-ddos cache<clear-idp-appddos-cache>

clear_idp_appddos_cache

<clear-idp-status-information>clear security idp status<clear-idp-status-information>

clear_idp_status_information

<vrrp-message>clear vrrp<clear-vrrp-information>

clear_vrrp_information

<vrrp-message>clear vrrp interface<clear-vrrp-interface-statistics>

clear_vrrp_interface_statistics

NONErequest system scripts refresh-from<request-script-refresh-from>

request_script_refresh_from

<dhcpv6-server-binding-information>show dhcpv6 server binding<get-dhcpv6-server-binding-information>

get_dhcpv6_server_binding_information

<dhcpv6-server-statistics-information>show dhcpv6 server statistics<get-dhcpv6-server-statistics-information>

get_dhcpv6_server_statistics_information

<mpls-static-lsp-information>show mpls static-lsp<get-mpls-static-lsp-information>

get_mpls_static_lsp_information

<mvrp-information>show mvrp<get-mvrp-information>

get_mvrp_information

<mvrp-applicant-state>show mvrp applicant-state<get-mvrp-applicant-information>

get_mvrp_applicant_information

<mvrp-vlan-information>show mvrp dynamic-vlan-memberships<get-mvrp-dynamic-vlan-memberships>

get_mvrp_dynamic_vlan_memberships

<mvrp-interface-information>show mvrp interface<get-mvrp-interface-information>

get_mvrp_interface_information

New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers ■ 19

New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

Table 1: JUNOS XML Tag Elements and CLI Command Equivalents New in JUNOS 10.1 (continued)

Response Tag ElementCLI CommandRequest Tag Element

<mvrp-registration-information>show mvrp registration-state<get-mvrp-registration-state>

get_mvrp_registration_state

<mvrp-interface-statistics>show mvrp statistics<get-mvrp-interface-statistics>

get_mvrp_interface_statistics

<idp-subscriber-policy-list>show security idp policies<get-idp-subscriber-policy-list>

get_idp_subscriber_policy_list

<idp-policy-template-information>show security idp policy-templates-list<get-idp-policy-template-information>

get_idp_policy_template_information

<idp-detail-status-information>show security idp status detail<get-idp-detail-status-information>

get_idp_detail_status_information

<service-nat-mapping-information>show services nat mappings<get-service-nat-mapping-information>

get_service_nat_mapping_information

<task-memory-information>show task memory<get-task-memory-information>

get_task_memory_information

<vrrp-information>show vrrp<get-vrrp-information>

get_vrrp_information

<vrrp-information>show vrrp interface<get-vrrp-interface-information>

get_vrrp_interface_information

<vrrp-information>show vrrp track<get-vrrp-track-interfaces>

get_vrrp_track_interfaces

20 ■ New Features in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers

JUNOS 10.1 Software Release Notes

Page is loading ...

Juniper JUNOS 10.1 - S REV 4 Release note

This manual is also suitable for

Juniper JUNOS 10.1 - S REV 4 Release note

Related papers

Other documents