Dell J-EX4500 Owner's Manual

Junos®OS 11.1 Software Release Notes for
Dell PowerConnect J-EX Series Ethernet Switches
Release 11.1R2 10 May 2011 Revision 2
You can also find these release notes at http://www.support.dell.com/manuals.

Contents

Junos OS Release Notes for J-EX Series Switches . . . . . . . . . . . . . . . . . . . . . . . . . . 3
New Features in Junos OS Release 11.1 for J-EX Series Switches . . . . . . . . . . . . 3
Resilient Dual-Root Partitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Access Control and Port Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Bridging, VLANs, and Spanning Trees . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Class of Service (CoS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
High Availability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Infrastructure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
IPv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Layer 2 and Layer 3 Protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Management and RMON . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
MPLS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Packet Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
PoE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
1
Junos OS 11.1 Software Release Notes
Virtual Chassis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Changes in Default Behavior and Syntax in Junos OS Release 11.1 for J-EX
Series Switches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Access Control and Port Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Bridging, VLANs, and Spanning Trees . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Infrastructure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Management and RMON . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Limitations in Junos OS Release 11.1 for J-EX Series Switches . . . . . . . . . . . . . . 11
Access Control and Port Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Bridging, VLANs, and Spanning Trees . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Class of Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Firewall Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Infrastructure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
J-Web Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Layer 2 and Layer 3 Protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Management and RMON . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Multicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Virtual Chassis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Outstanding Issues in Junos OS Release 11.1 for J-EX Series Switches . . . . . . 16
Access Control and Port Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Firewall Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Infrastructure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
J-Web Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Management and RMON . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Resolved Issues Since Junos OS Release 10.3 . . . . . . . . . . . . . . . . . . . . . . . . . 20
Issues Resolved in Release 10.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Issues Resolved in Release 10.4R1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Issues Resolved in Release 10.4R2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Issues Resolved in Release 10.4R3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Issues Resolved in Release 10.4R4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Issues Resolved in Release 11.1R1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Issues Resolved in Release 11.1R2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Errata in Documentation for Junos OS Release 11.1 for J-EX Series
Switches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Access Control and Port Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Infrastructure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Upgrade and Downgrade Instructions for Junos OS Release 11.1 for J-EX
Series Switches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Upgrading from Junos OS Release 11.1R2 or Later . . . . . . . . . . . . . . . . . . . 37
Upgrading from Junos OS Release 10.3 or Earlier . . . . . . . . . . . . . . . . . . . 39
Downgrading to Junos OS Release 10.3 or Earlier . . . . . . . . . . . . . . . . . . 49
Dell Documentation and Release Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
Requesting Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
Revision History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
2

Junos OS Release Notes for J-EX Series Switches

Junos OS Release Notes for J-EX Series Switches
New Features in Junos OS Release 11.1 for J-EX Series Switches on page 3
Changes in Default Behavior and Syntax in Junos OS Release 11.1 for J-EX Series Switches on page 10
Limitations in Junos OS Release 11.1 for J-EX Series Switches on page 11
Outstanding Issues in Junos OS Release 11.1 for J-EX Series Switches on page 16
Resolved Issues Since Junos OS Release 10.3 on page 20
Errata in Documentation for Junos OS Release 11.1 for J-EX Series Switches on page 36
Upgrade and Downgrade Instructions for Junos OS Release 11.1 for J-EX Series Switches on page 37

New Features in Junos OS Release 11.1 for J-EX Series Switches

New features in Release 11.1 of the Junos operating system (Junos OS) for J-EX Series switches are described in this section.
NOTE: Upgrading to Junos OS Release 11.1 from Release 10.3 or earlier is more
involved than previous upgrades as a result of the introduction of resilient dual-root partitions. This new feature incorporates enhancements that add additional steps when you upgrade from a release that does not support resilient dual-root partitions to one that does. Once you are running a release that supports resilient dual-root partitions, such as Release 11.1R2, future upgrades will not require these additional steps.
See “Upgrade and Downgrade Instructions for Junos OS Release 11.1 for J-EX Series Switches” on page 37 for information about how to upgrade to Release
11.1R1.
Not all J-EX Series software features are supported on all J-EX Series switches in the current release. For a list of all J-EX Series software features and their platform support, see J-EX Series Switch Software Features Overview in the Dell PowerConnect J-Series Ethernet Switch Complete Software Guide for Junos OS: Volume 1 at
http://www.support.dell.com/manuals.
New features are described on the following pages:
Resilient Dual-Root Partitions on page 4
Hardware on page 5
Access Control and Port Security on page 6
Bridging, VLANs, and Spanning Trees on page 6
Class of Service (CoS) on page 6
High Availability on page 7
Infrastructure on page 7
3
Junos OS 11.1 Software Release Notes
Interfaces on page 8
IPv6 on page 8
Layer 2 and Layer 3 Protocols on page 8
Management and RMON on page 8
MPLS on page 9
Packet Filters on page 9
PoE on page 9
Virtual Chassis on page 9

Resilient Dual-Root Partitions

Resilient Dual-Root Partitions—Resilient dual-root partitioning, introduced on J-EX
Series switches with Junos OS Release 11.1R2, provides additional resiliency to switches in the following ways:
Allows the switch to boot transparently from the second root partition if the system fails to boot from the primary root partition.
Provides separation of the root Junos OS file system from the /var file system. If corruption occurs in the /var file system (a higher probability than in the root file system due to the greater frequency in /var of reads and writes), the root file system is insulated from the corruption.
4
New Features in Junos OS Release 11.1 for J-EX Series Switches

Hardware

J-EX4500 Virtual Chassis—You can form a Virtual Chassis by connecting J-EX4500 switchesto J-EX4200 switches or to other J-EX4500 switches and manage the switches as a single Virtual Chassis.
Two J-EX4500 switches can be interconnected into a Virtual Chassis composed exclusively of J-EX4500 switches. J-EX4200 and J-EX4500 switches can be connected togetherinto the same VirtualChassis to form a mixedJ-EX4200 and J-EX4500 Virtual Chassis. A mixed J-EX4200 and J-EX4500 Virtual Chassis supports up to two J-EX4500 switches and up to eight J-EX4200 switches.
In a mixed J-EX4200 and J-EX4500 Virtual Chassis, you must configure the J-EX4500 switch or switches in the routing-engine role to ensure that the J-EX4500 switches function in the master or backup roles. The J-EX4200 switches must be configured in the line-card role.
You must install a Virtual Chassis module in a J-EX4500 switch to use the switch in a Virtual Chassis. The Virtual Chassis module provides two dedicated Virtual Chassis ports (VCPs) that are used to connect the switch to other Virtual Chassis member switches. You can also configure any 10-Gigabit Ethernet port in an SFP+ module in a J-EX4500 switch as a VCP to cable the Virtual Chassis over longer distances.
EX4500-40F-VC1-FB and EX4500-VC1-BF switch models ship with a Virtual Chassis module preinstalled. You can also purchase the Virtual Chassis module as a field-replaceable unit (FRU).
NOTE: We recommend preprovisioning the Virtual Chassis configuration
before cabling the J-EX4500 switch into the Virtual Chassis. You cannot cable a J-EX4500 switch into a Virtual Chassis without first configuring the J-EX4500 switch as a Virtual Chassis member.
The J-Web interface is not supported on a J-EX4500 Virtual Chassis.
New optical transceivers support on J-EX4500 switches—SFP+ uplink modules in J-EX4500 switches now supports one new optical transceiver: EX-SFP-10GE-ER (10GBase-ER, 40 km).
New optical transceivers support on 40-port SFP+ line cards—40-port SFP+ line cards in a J-EX8200 switch now support the following optical transceivers:
EX-SFP-1GE-T (1000Base-T, 100 m)
EX-SFP-1GE-SX (1000Base-SX, 220 m, 275 m, 500 m, 550 m)
EX-SFP-1GE-LX (1000Base-LX, 10 km)
EX-SFP-1FE-LH (100Base-ZX, 70 km)
5
Junos OS 11.1 Software Release Notes
New SFP+ direct attach cable support for 40-port SFP+ line cards—40-port SFP+ line cards in a J-EX8200 switch now support one SFP+ direct attach cable, EX-SFP-10GE-DAC-5m.

Access Control and Port Security

802.1X authentication enhancement—The new no-mac-table-binding option allows you to dissociate the MAC table from the authentication session table so that the authentication session does not end when the MAC address ages out of the MAC table.
LLDP transmit-delay option—The new transmit-delay option allows you to specify the number of seconds the device delays before sending advertisements to neighbors after a change is made in a type, length, and value (TLV) element in the Link Layer Discovery Protocol (LLDP) or in the state of the local system, such as a change in hostname or management address. You can set this value to reduce delays in notifying neighbors of changes in the local system.
EX-SFP-10GE-LR (10GBase-LR, 10 km)
EX-SFP-10GE-ER (10GBase-ER, 40 km)
MAC table aging time enhancement—An additional unlimited value allows you to set the MAC table aging time so that it never expires and MAC addresses are never removed from the table.
NetBIOS snooping—Youcan enable NetBIOS snooping on the switch so that the switch can identify NetBIOS resourcesthat are connected to it. The NetBIOS snooping-enabled switch extracts the host details from the NetBIOS name registration packet and stores the details in the LLDP neighbor database.

Bridging, VLANs, and Spanning Trees

PrivateVLAN support on J-EX4500 switches—PVLANs and PVLANs across switches are now supported on J-EX4500 switches. PVLAN features allow an administrator to split a broadcast domain into multiple isolated broadcast subdomains, essentially creating a VLAN inside a VLAN.

Class of Service (CoS)

CoS enhancement on J-EX8200 switches—J-EX8200 switches implement the on-demand allocation of memory space for ternary content addressable memory (TCAM) so that when additional TCAM space is required for CoS classifiers, it is allocated from the free TCAM space or from the unused TCAM space.
Increased number of scheduler maps per port group on J-EX8200 40-port SFP+ line cards—On 40-port SFP+ line cards in J-EX8200 switches, you can configure a
maximum of six scheduler maps for each port group. Previously, the maximum was six scheduler maps for all port groups on the line card.
6
New Features in Junos OS Release 11.1 for J-EX Series Switches

High Availability

Nonstop active routing on J-EX4200 Virtual Chassis and J-EX8200 switches enhancement—Nonstop active routing (NSR) is now supported for RIP, BGP, IS-IS,
and IGMP with BFD on J-EX4200 Virtual Chassis and J-EX8200 switches. Nonstop active routing for OSPFv2 with BFD is now supported on J-EX4200 Virtual Chassis.

Infrastructure

Resilient dual-root partitioning—Resilient dual-root partitioning, introduced on J-EX Series switches at Junos 11.1R2, provides additional resiliency to switches in the following ways:
Provides a preinstalled Junos image in the second root partition of the file system.
Allows the switch to boot transparently from the second root partition if the system fails to boot from the primary root partition.
Provides separation of the root Junos file system from the file system. If corruption to the /var file system occurs (which is more likely than corruption occurring in the root file system because of a greater frequency of read and write operations), the root file system is insulated from the corruption.
To upgrade to Junos OS Release 11.1 from Junos OS Release 10.3 or earlier requires that you first upgrade the jloader package. The software installation process reformats the disk from 3 partitions to 4 partitions. Detailed instructions are below. This software upgrade procedure takes longer than an ordinary upgrade.
Self-signed digital certificates for enabling SSL services—J-EX Series switches are now shipped with system-generated self-signed digital certificates. You can use the self-signed digital certificates to enable SSL services, such as secure web access (HTTPS), on the switches. You can delete and regenerate the self-signed digital certificates using the CLI, and you can generate custom self-signed digital certificates if you do not want to use the system-generated self-signed digital certificates.
7
Junos OS 11.1 Software Release Notes

Interfaces

Reflective relay—Reflective relay returns packets on J-EX4500 switches to a device using the same downstream port that delivered the packetsto the switch. For example, you can use reflective relay to allow the switch to receive aggregated virtual machine packets from a technology such as virtual Ethernet packet aggregation (VEPA). You configure the new port mode called tagged access on the interface (port) to accept aggregated, tagged packets.

IPv6

IPv6 support on J-EX4500 switches—J-EX4500 standalone switches now support OSPFv3 and RIPng.

Layer 2 and Layer 3 Protocols

Additional Layer 2 networking procotols support on J-EX8200 switches—J-EX8200 switches now support Q-in-Q tunneling.

Management and RMON

Additional port mirroring analyzers on J-EX4500 switches—You can now enable six additional analyzers on J-EX4500 switches, for a total of either seven analyzers on interfaces or a combination of six analyzers on interfaces and one analyzer on a VLAN.
Power Supply Unit MIB—Enhancements have been made to the JUNIPER-POWER-MANAGEMENT module (jnxPsuMIB).
sFlow technology enhancements—The sFlow datagram now includes details of the interfacethrough which the packets entered the agent and the interface through which the packets exited the agent.
Uplink failure detection on J-EX Series switches—Uplink failure detection allows a switch to detect link failure on uplink interfaces and to propagate the failure to the downlink interfaces so that servers connected to those downlinks can switch over to secondary interfaces.
Virtual Chassis MIB enhancements—Enhancements have been made to the Virtual Chassis MIB that allow you to check for the Virtual Chassis MIB registration with the SNMP daemon and check whether SNMP traps are getting registered when a Virtual Chassis member switch goes up or down.
8
New Features in Junos OS Release 11.1 for J-EX Series Switches

MPLS

MPLS enhancements on J-EX8200 switches—On J-EX8200 switches, you can use MPLS-based Layer 2 and Layer 3 virtual private networks (VPNs) or MPLS Layer 2 circuits, allowing you to securely connect geographically diverse sites across an MPLS network. MPLS services can be used to connect various sites to a backbone network and to ensure better performance for low-latency applications such as voice over IP (VoIP) and other business-critical functions.
A Layer 2 circuit is a point-to-point Layer 2 connection that uses MPLS or another tunneling technology on the service provider’s network. A Layer 2 circuit is similar to a circuit cross-connect (CCC), except that multiple Layer 2 circuits can be transported over a single label-switched path (LSP) tunnel between two provider edge (PE) switches, while each CCC requires a dedicated LSP. The Junos OS implementation of Layer 2 circuits supports only the remote form of a Layer 2 circuit; that is, a connection from a local customer edge (CE) switch to a remote CE switch. LDP is also supported; it is the signaling protocol used for advertising VPN labels.

Packet Filters

New firewall filter match condition on J-EX8200 switches—You can use the new
ip-version match condition to configure port and VLAN firewall filters for IPv4 and IPv6
traffic on J-EX8200 switches. In addition to specifying the type of supported traffic, this new match condition also allows you to define certain match conditions.
New firewall filter match condition for non-IP traffic with LLC non-SNAP Ethernet encapsulation—You can use the new l2-encap-type llc-non-snap match condition to
configure port and VLAN firewall filters for non-IP traffic with the LLC non-SNAP Ethernet encapsulation type on J-EX Series switches.
PoE
Enhanced PoE on J-EX4200 switches—J-EX4200 switches now support enhanced Power over Ethernet (PoE), which is a Juniper Networks extension to the IEEE 802.3af standard. Enhanced PoE increases the maximum power that a PoE port can provide to 18.6 W. Enhanced PoE is available only when the PoE power management mode is static mode.
NOTE: To enable enhanced PoE on J-EX4200 switches, in addition to
ugrading the switch from an earlier release to Junos OS Release 11.1, you must also upgrade the PoE controller software.

Virtual Chassis

Related
Documentation
J-EX4500 Virtual Chassis—Virtual Chassis are now supported on J-EX4500 switches, as are Virtual Chassis configurations composed of a mix of J-EX4200 switches and J-EX4500 switches.
Changes in Default Behavior and Syntax in Junos OS Release 11.1 for J-EX Series Switches
on page 10
9
Junos OS 11.1 Software Release Notes
Limitations in Junos OS Release 11.1 for J-EX Series Switches on page 11
Outstanding Issues in Junos OS Release 11.1 for J-EX Series Switches on page 16
Resolved Issues Since Junos OS Release 10.3
Errata in Documentation for Junos OS Release 11.1 for J-EX Series Switches on page 36
Upgrade and Downgrade Instructions for Junos OS Release 11.1 for J-EX Series Switches
on page 37

Changes in Default Behavior and Syntax in Junos OS Release 11.1 for J-EX Series Switches

This section lists the changes in default behavior and syntax in Junos OS Release 11.1 for J-EX Series switches.

Access Control and Port Security

The show lldp local-information command output has been updated to display the IPv6 address of the neighbor as part of show lldp neighbors interface interface-name and ifIndex(2) under Management Information.

Bridging, VLANs, and Spanning Trees

GARP VLAN Registration Protocol (GVRP) is no longer supported on J-EX Series switches.
On J-EX Series switches, the VLAN limit is 4094 and the recommendedVLAN members limit is 32,752. The VLAN limit cannot be exceeded because each VLAN requires an ID number. However, if you configure a trunk interface with the option all for VLANs, you could exceed the VLAN member limit.
Prior to Junos OS Release 11.1, if the recommended VLAN member limit was exceeded in a configuration,no error was displayed.In Release11.1, under the same circumstances, the commit succeeds and a warning message is displayed. When you commit a configuration with more than 32,752 VLAN members, this message is displayed: “warning: Exceeded vmember threshold limit, it is recommended to have not more than 32752 vmembers configuration check succeeds commit complete.”

Infrastructure

On J-EX8200 switches, when you take a line card offline using the request system
reboot power-off or request system halt power-off command, the link failover occurs
quickly and the MAC table is flushed quickly. However, if a line card is taken offline as the result of an unexpected Routing Engine reboot or as the result of a software problem or hardware failure, the failover of the link and flushing of MAC table do not happen quickly.
The parity error-detection mechanism has been enhanced so that if the switch receives three or more soft resets within 30 seconds, Junos OS shuts it down.
10

Limitations in Junos OS Release 11.1 for J-EX Series Switches

Management and RMON

On a J-EX4500 Virtual Chassis that are configured with analyzers (port-mirroring configurations), when the monitored port and the output port are on different Virtual Chassis members, the analyzers do not work and no traffic is mirrored. Port mirroring works if both the monitored port and the output port are on the same member.
Related
Documentation
New Features in Junos OS Release 11.1 for J-EX Series Switches on page 3
Limitations in Junos OS Release 11.1 for J-EX Series Switches on page 11
Outstanding Issues in Junos OS Release 11.1 for J-EX Series Switches on page 16
Resolved Issues Since Junos OS Release 10.3
Errata in Documentation for Junos OS Release 11.1 for J-EX Series Switches on page 36
Upgrade and Downgrade Instructions for Junos OS Release 11.1 for J-EX Series Switches
on page 37
Limitations in Junos OS Release 11.1 for J-EX Series Switches
This section lists the limitations in Junos OS Release 11.1R2 for J-EX Series switches.

Access Control and Port Security

When you have configured more than 1024 supplicants on a single interface, 802.1X authentication might not work as expected and the 802.1X process (dot1xd) might fail.
The RADIUS request sent by a J-EX Series switch contains both Extensible Authentication Protocol (EAP) Identity Response and State attributes.
On J-EX4200 switches,EAP-TTLS authentication with a server-reject-vlan configuration might not work.
In 802.1X (dot1x) single-secure mode, when the supplicant switches from a server-fail authentication to RADIUS authentication on a VLAN, traffic might be dropped. As a workaround, issue the clear dot1x firewall command.
If storm control is enabled, the Link Aggregation Control Protocol (LACP) might stop and then restart when Layer 2 packets are sent at a high rate of speed.
When an external RADIUS server goes offline and comes back online after some time, subsequent captive portal authentication requests might fail until the authd daemon is restarted. As a workaround, configure the revert interval—the time after which to revert to the primary server—and restart the authd daemon.
When a J-EX Series switch receives an LLDP PDU with a 0-byte TLV information string, it treats the PDU as an error and discards all information received on that interface. Per the IEEE standard, a TLV information string can be 0 bytes.

Bridging, VLANs, and Spanning Trees

If you modify the MSTP configuration and VLAN membership for an interface, that modification could result in inconsistent MSTP membership for that interface. As a
11
Junos OS 11.1 Software Release Notes
workaround, restart the Ethernet switching process (eswd) after making the configuration changes.
If you delete multiple spanning-tree protocol interfaces from a configuration by using a single commit command and then add the interfaces back to the configuration, the spanning-tree protocol packets might be dropped. As a workaround, use a separate
commit command to delete each spanning-tree protocol interface.

Class of Service

On J-EX8200 switches, classification of packets using ingress firewall filter rules with forwarding-class and loss-priority configurations does not rewrite the DSCP or 802.1p bits. Rewriting of packets is determinedby the forwarding-class and loss-priority values set in the DSCP classifier applied on the interface.
On J-EX4200 switches, the traffic is shaped at rates above 500 Kbps, even when the shaping rate configured is less than 500 Kbps.
On J-EX8200 switches, it can take a long time to install code-point classifiers on interfaces (for example,approximately 25 minutes to install 64 code-point classifiers).

Firewall Filters

On J-EX4200 switches, when interface ranges or VLAN ranges are used in configuring firewall filters, egress firewall filter rules take more than 5 minutes to install.
On J-EX4200 switches, IGMP packets are not matched by user-configured firewall filters.
In a firewall filter configuration, if the log or the syslog action modifier is configured along with a vlan action or an interface action modifier, the events might not be logged. However, the redirect interface functionality works as expected. [PR/540097]
On J-EX8200 switches, if you configure an implicit or explicit discard action as the last term in an IPv6 firewall filter on a loopback (lo0) interface, all traffic bound for the CPU passes through this filter and is dropped unless you configure an explicit term to accept the required type of packets. This limitation is specific to IPv6 filter and is not applicable to IPv4 filters configured on a loopback interface.

Hardware

On 40-port SFP+ line cards for J-EX8200 switches, the LEDs on the left of the network ports do not blink to indicatethat there is link activity if you set the speed of the network ports to 10/100/1000 Mbps. However, if you set the speed to 10 Gbps, the LEDs blink.
If you press the reset button on the Switch Fabric and Routing Engine (SRE) module in a J-EX8208 switch without taking the module offline first (by using the CLI), the fabric planes in the module might not come back online.
On 40-port SFP+ line cards installed in J-EX8200 switches, it takes about 10 seconds for the network ports to come up after you reboot the switch or restart the line card.
On J-EX4500 switches, the show chassis environment power-supply-unit command does not display values for the input voltage, the output voltage,and the output current.
12
Limitations in Junos OS Release 11.1 for J-EX Series Switches

Infrastructure

On J-EX Series switches, an SNMP query fails when the SNMP index size of a table is greater than 128 bytes, because the Net SNMP tool does not support SNMP index sizes greater than 128 bytes.
On J-EX Series switches, the show snmp mib walk etherMIB command does not display any output, even though the etherMIB is supported. This occurs because the values are not populated at the module level—they are populated at the table level only. You can issue show snmp mib walk dot3StatsTable, show snmp mib walk dot3PauseTable, and show snmp mib walk dot3ControlTable commands to display the output at the table level.
When you issue the request system power-off command, the switch halts instead of turning off power.
On J-EX8200 switches, if IS-IS is enabled on routed VLAN interfaces (RVIs), IS-IS adjacency states go down and come up after a graceful Routing Engine switchover (GRES).
Momentary loss of an inter-Routing Engine IPC message might trigger the alarm that displaysthe message “Loss of communicationwith Backup RE”. There is no functionality affected.
On J-EX4200 switches that are configured with the factory default configuration, if you use the set date command to change the date, the switches accept the date but display the message "date: connect: Can't assign requested address".
If you perform graceful Routing Engine switchover (GRES) on a J-EX4200 or J-EX8200 switch, the Ethernet switching table might not refresh because the Packet Forwarding Engine retains the forwarding database (FDB) entries. The result is that traffic is flooded to the affected MAC addresses. As a workaround, refresh the Ethernet switching table by issuing the clear ethernet-switching table command.
On J-EX8208 switches, when a line card that has no interface configurations and is not connected to any device is taken offline using the request chassis fpc-slot
slot-number offline command, the Bidirectional Forwarding Detection process (bfd)
starts and stops repeatedly. The same bfd process behavior occurs on a line card that is connected to a Layer 3 domain when another line card that is on the same switch and is connected to a Layer 2 domain is taken offline.
On J-EX4500 switches, the LCD panel's maintenance menu is not disabled even if you include the lcd maintenance-menu disable statement in the configuration.
When you enable the filter-id attribute on the RADIUS server for a particular client, one of the required 802.1X authentication rules is not inserted in the IPv6 database. IPv6 traffic on the authenticated interface is not filtered; only IPv4 traffic is filtered on that interface.
Distributed periodic packet management (PPM) of Bidirectional Forwarding Detection (BFD) protocol traffic is not supported for virtual routing instances. As a workaround,
13
Junos OS 11.1 Software Release Notes
use the centralized PPM model by disabling distributed PPM with the command set
routing-options ppm no-delegate-processing.
For interfaces on which storm control is enabled, multicast traffic is rate-limited.

Interfaces

J-EX Series switches do not support queued packet counters. Therefore, the queued packet counter in the output of the show interfacesinterface-nameextensive command always displays a count of 0 and is never updated.
The following message might appear in the system log:
You can ignore this message.
On J-EX4200 switches, when port mirroring is configured on any interface, the mirrored packets leaving a tagged interface might contain an incorrect VLAN ID.
On J-EX8200 switches, port mirroring configuration is not supported on a Layer 3 interface with the output configured to a VLAN.
Resolve request came for an address matching on Wrong nh nh:355, type:Unicast...?
The following interface counters are not supported on routed VLAN interfaces (RVIs): local statistics, traffic statistics, and transit statistics.
J-EX Series switches do not support IPv6 interface statistics. Therefore, all values in the output of the show snmp mib walk ipv6IfStatsTable command always display a count of 0.
The show interfaces interface-name detail | extensive command might display double counting of packets or bytes for the transit-statistics and traffic-statistics counters. You can use the counter information displayed under the Physical interface section of the output.
On J-EX Series switches, if you clear LAG interface statistics while the LAG is down, then bring up the LAG and pass traffic without checking for statistics, and finally bring the LAG interface down and check interface statistics again, the statistics might be inaccurate. As a workaround, use the show interfaces interface-name command to check LAG interface statistics before bringing down the interface.
On J-EX8200 switches,when you perform a graceful Routing Engine switchover(GRES) or when you restart Ethernet switching in any spanning-tree protocol domain, a loop might occur.
On J-EX4200, and J-EX4500 switches, although an interface is not created if you do not install any transceiver in a fiber port, the show chassis lcd or show chassis led command might show that an interface exists and shows its LED status as Off. For 10-Gigabit Ethernet interfaces on J-EX4500 switches, the output of these commands might show the interface prefix as ge- instead of xe-. As a workaround, issue the show
interfaces terse command to check whether a transceiver is actually installed and to
display the xe-interface prefix to verify the interface's 10-Gigabit Ethernet capability.
14
Limitations in Junos OS Release 11.1 for J-EX Series Switches

J-Web Interface

In the J-Web interface, the Ethernet Switching monitoring page might not display monitoring details if there are more than 13,000 MAC entries on the switch.
When MVRP is configured on a trunk interface, you cannot configure connectivity fault management (CFM) on that interface.
If four or more J-EX8200-40XS line cards are inserted in a J-EX8208 or J-EX8216 switch, the Support Information page (Maintain Customer Support > Support Information) in the J-Web interface might fail to load because the configuration might be larger than the maximum size of 5 MB. The error message "Configuration too large to handle" is displayed.

Layer 2 and Layer 3 Protocols

On J-EX8200 switches that have both graceful Routing Engine switchover (GRES) and nonstop active routing (NSR) enabled, if you upgrade the software on the master Routing Engine, the routing processes might fail to restart on the backup Routing Engine. If the routing processes fail to restart automatically, manually restart them by issuing the restart routing command.

Management and RMON

On J-EX8200 switches, when an egress VLAN that belongs to a routed VLAN interface (RVI) is configured as the input for a port mirroring analyzer, the analyzer appends an incorrect 802.1Q (dot1q) header to the mirrored packets on the routed traffic or does not mirror any packets on the routed traffic. As a workaround, configure a port mirroring analyzer with each port of the VLAN as egress input.
When you configure sFlow monitoring technology, the switch allows you to configure separate ingress and egress sample rates on the same interface. Configuring more than one sample rate on an interface can lead to inaccurate results, so configure just one rate per interface.

Multicast

The following limitations apply to multicast traffic and virtual routing and forwarding (VRF):
Routed multicast traffic is supported only on the default virtual routing instance. On nondefault virtual routing instances, routed multicast traffic is flooded on Layer 3 interfaces, but aggregated Ethernet interfaces and routed VLAN interfaces (RVIs) are not supported.
15
Junos OS 11.1 Software Release Notes

Virtual Chassis

On a J-EX4500 Virtual Chassis, if you issue the ping command to the IPv6 address of the virtual management Ethernet (VME) interface, the ping fails.
When a J-EX4500 switch becomes a member of a Virtual Chassis, it is assigned a member ID. If that member ID is a non-zero value, then if that member switch is downgraded to a software image that does not support Virtual Chassis, you cannot change the member ID to 0. A standalone EX4500 switch must have a member ID of
0. The workaround is to convert the J-EX4500 Virtual Chassis member switch to a standalone J-EX4500 switch before downgrading the software to an earlier release, as follows:
1. Disconnect all Virtual Chassis cables from the member to be downgraded.
2. Convert the member switch to a standalone J-EX4500 switch by issuing the request
MLD snooping of IPv6 multicast traffic is not supported. Layer 2 multicast traffic is always flooded on the VLAN.
virtual-chassis reactivate command.
Related
Documentation
3. Renumber the member ID of the standalone switch to 0 by issuing the request
virtual-chassis renumber command.
4. Downgrade the software to the earlier release.
When the backup Virtual Chassis is rebooted, a redundant trunk group (RTG) failover might occur incorrectly, with the RTG from the Virtual Chassis master primary link erroneously switching to the secondary link of the Virtual Chassis backup.
In a mixed J-EX4200 and J-EX4500 Virtual Chassis (that is, a Virtual Chassis that has both J-EX4500 and J-EX4200 member switches), an egress analyzer does not work when the input and output ports are on J-EX4200 switches separated by a J-EX4500 switch.
New Features in Junos OS Release 11.1 for J-EX Series Switches on page 3
Changes in Default Behavior and Syntaxin Junos OS Release11.1 for J-EX Series Switches
on page 10
Outstanding Issues in Junos OS Release 11.1 for J-EX Series Switches on page 16
Resolved Issues Since Junos OS Release 10.3
Errata in Documentation for Junos OS Release 11.1 for J-EX Series Switches on page 36
Upgrade and Downgrade Instructions for Junos OS Release 11.1 for J-EX Series Switches
on page 37

Outstanding Issues in Junos OS Release 11.1 for J-EX Series Switches

The following are outstanding issues in Junos OS Release 11.1R2 for J-EX Series switches. The identifier following the description is the tracking number in our bug database.
16
Loading...
+ 35 hidden pages