Juniper JUNOSe 10.3.2 Release Note Download Page 95

Page: 95 / 118

ERX310, ERX7xx, and ERX14xx System Maximums

Appendix A: System Maximums

IPSec tunnels per IPSec Service Module

5000

L2TP sessions per chassis

(See Notes 2 and 3 on page 86.)

16,000

32,000

L2TP sessions per line module

(See Notes 1 and 3 on page 86.)

GE-2 with shared tunnel-server ports provisioned

8000

–

8000

GE-HDE with shared tunnel-server ports provisioned

8000

–

8000

IPSec Service Module (ISM; L2TP/IPSec sessions)

5000

Service Module (SM)

16,000

L2TP tunnels per chassis

8000

L2TP tunnels per line module

(See Notes 1 and 3 on page 86.)

GE-2 with shared tunnel-server ports provisioned

8000

–

8000

GE-HDE with shared tunnel-server ports provisioned

8000

–

8000

IPSec Service Module (L2TP/IPSec tunnels)

5000

Service Module

8000

Table 6: Tunneling Maximums (continued)

Feature

ERX310

ERX705 and
ERX710

ERX1410

ERX1440

Summary of Contents for JUNOSe 10.3.2

Page 1: ...niper Networks Inc 1194 North Mathilda Avenue Sunnyvale CA 94089 USA 408 745 2000 www juniper net Published 2010 09 29 JunosE Software for E Series Broadband Services Routers Release Notes Release 10 3 2 ...

Page 2: ...ce is located outside the Americas such applicable entity being referred to herein as Juniper and ii the person or organization that originally purchased from Juniper or an authorized Juniper reseller the applicable license s for use of the Software Customer collectively the Parties 2 The Software In this Agreement Software means the program modules and features of the Juniper or Juniper supplied ...

Page 3: ... WILL BE FREE OF VULNERABILITY TO INTRUSION OR ATTACK In no event shall Juniper s or its suppliers or licensors liability to Customer whether in contract tort including negligence breach of warranty or otherwise exceed the price paid by Customer for the Software that gave rise to the claim or if the Software is embedded in another Juniper product the price paid by Customer for such other product C...

Page 4: ...nd supersedes all prior and contemporaneous agreements relating to the Software whether oral or written including any inconsistent terms contained in a purchase order except that the terms of a separate written agreement executed by an authorized Juniper representative and Customer shall govern to the extent such terms are inconsistent or conflict with terms contained herein No modification to thi...

Page 5: ...Release Overview 5 Before You Start 5 Release Highlights 7 IPv6 7 Early Field Trial Features 7 DHCP 8 Unified ISSU 9 Unsupported Features 9 E120 Router and E320 Router 9 Multicast 9 Policy Management 9 Stateful SRP Switchover High Availability 10 Release Software Protocols 10 Core Routing Stack 10 Layer 2 Protocols 10 Multiprotocol Label Switching MPLS 11 Network Management Protocols 11 Routing Pr...

Page 6: ...ul SRP Switchover High Availability 32 Subscriber Interfaces 33 System 33 System Logging 34 Tunneling 34 Known Problems and Limitations 35 ANCP 35 ATM 35 BFD 37 Bridged Ethernet 37 CLI 37 DHCP 37 DHCP External Server 38 DoS Protection 38 Ethernet 38 File System 38 Forwarding 39 ICR 40 IGMP 41 IP 41 IPSec 42 IS IS 43 L2TP 43 MLD 43 MLPPP 43 Mobile IP 44 MPLS 44 Multicast 45 Netflow 45 Policy Manage...

Page 7: ...PLS 56 OSPF 56 Policy Management 56 QoS 56 RSVP TE 57 SRC Software and SDX Software 57 SRP 57 Errata 58 Appendix A System Maximums 69 ERX310 ERX7xx and ERX14xx System Maximums 70 General System Maximums 70 Physical and Logical Density Maximums 71 Link Layer Maximums 74 Routing Protocol Maximums 79 Policy and QoS Maximums 83 Tunneling Maximums 86 Subscriber Management Maximums 88 E120 and E320 Syst...

Page 8: ...viii Table of Contents JunosE 10 3 2 Release Notes ...

Page 9: ...n restore the earlier software version Upgrading to Release 5 3 0 or a Higher Numbered Release When you upgrade from a lower numbered release to Release 5 3 0 or a higher numbered release the higher release might not load if you issue the boot system command from Boot mode while the lower numbered software is running on the router or if you insert a flash card running a higher numbered release int...

Page 10: ...ocuments JunosE System Basics Configuration Guide Chapter 6 Managing Modules Upgrading NVS Cards on SRP Modules in ERX Hardware Guide Chapter 8 Maintaining ERX Routers Upgrading NVS Cards on SRP Modules in E120 and E320 Hardware Guide Chapter 8 Maintaining the Router Moving Line Modules Between Releases The Juniper Networks ERX1440 Broadband Services Router employs a 40 Gbps SRP module and a new m...

Page 11: ... protocols and applications supported by ERX router modules are in ERX Module Guide Appendix A Module Protocol Support Compatibility of E120 router and E320 router modules with software releases is in E120 and E320 Module Guide Table 1 Modules and IOAs Layer 2 and layer 3 protocols and applications supported by IOAs on the E120 router and the E320 router are in E120 and E320 Module Guide Appendix ...

Page 12: ... notes http www juniper net customers csc software Search technical bulletins for relevant hardware and software notifications https www juniper net alerts Join and participate in the Juniper Networks Community Forum http www juniper net company communities Open a case online in the CSC Case Manager http www juniper net cm To verify service entitlement by product serial number use our Serial Numbe...

Page 13: ... 69 If the information in these Release Notes differs from the information found in the published documentation set follow these Release Notes Before You Start These Release Notes include information about the changes between Releases 10 3 1 and 10 3 2 Before you use your new software read these Release Notes in their entirety especially the section Known Problems and Limitations You need the foll...

Page 14: ...undancy stateful SRP switchover unified ISSU VRRP and interchassis redundancy ICR JunosE Service Availability Configuration Guide Configure IP IPv6 and Neighbor Discovery and interior gateway protocols RIP OSPF and IS IS JunosE IP IPv6 and IGP Configuration Guide Configure IP routing services including routing policies NAT J Flow statistics BFD IPSec digital certificates and IP tunnels JunosE IP S...

Page 15: ...erfaces If both an IPv6 profile and RADIUS are configured for Neighbor Discovery router advertisement the prefix value returned in RADIUS VSA 26 129 takes precedence over the prefix specified in the IPv6 profile configuration Change in existing behavior Existing feature extended as described here In lower numbered releases IPv6 Neighbor Discovery was supported only on Fast Ethernet Gigabit Etherne...

Page 16: ... server DHCP relay and DHCP relay proxy on these POS modules in either a virtual router VR or a VPN routing and forwarding instance VRF As part of this feature the pos keyword has been added to the existing ip dhcp local limit command To specify the maximum number of IP addresses that the DHCP local server application can supply to all POS access interfaces or to a specific POS access interface in...

Page 17: ...n the ES2 10G Uplink LM using the CLI However configuring subscriber interfaces on the ES2 10G Uplink LM provides no benefit because access features such as per subscriber QoS are unavailable on the module Multicast Unsupported IPv6 Data MDT Commands in CLI The ipv6 pim data mdt command and the show ipv6 pim data mdt command are unsupported in the current release The IPv6 PIM Data MDT Configuratio...

Page 18: ... the configuration guides Core Routing Stack Internet Protocol IP version 4 and version 6 Transmission Control Protocol TCP for IPv4 User Datagram Protocol UDP for IPv4 and IPv6 Layer 2 Protocols Asynchronous Transfer Mode ATM Bridged Ethernet Bridged IP Cisco High Level Data Link Control Cisco HDLC Ethernet Extensible Authentication Protocol EAP Frame Relay Layer 2 Tunneling Protocol L2TP Multili...

Page 19: ...tocol IGMP Intermediate System to Intermediate System IS IS Layer 2 Virtual Private Networks L2VPNs Mobile IP Open Shortest Path First OSPF version 2 and version 3 Protocol Independent Multicast Protocol PIM including PIM dense mode PIM sparse mode PIM dense sparse mode and PIM source specific multicast Routing Information Protocol RIP version 2 Virtual Private LAN Service VPLS Virtual Router Redu...

Page 20: ...ks AAA Although you can use the max sessions command to configure a maximum of 32 000 outstanding authentication authorization requests to a RADIUS server AAA internal limits prevent the actual number of outstanding authentication authorization requests from exceeding 9600 These internal AAA limits apply only to authentication authorization requests and not to accounting requests The JunosE Softwa...

Page 21: ...isplayed under certain conditions bgpConnections default 0 0 0 0 TCP error code xx occurred while accepting inbound TCP connection The message is generated when an unconfigured peer attempts to establish a TCP session with an E Series router and a valid route to the source address of the peer is absent from the router s routing table If a valid route exists in the routing table the following messa...

Page 22: ...ounting interval and aaa user accounting interval cablelength short Controller Configuration channel group description Controller Configuration channel group shutdown Controller Configuration channel group snmp trap link status Controller Configuration channel group timeslots Controller Configuration classifier list Global Configuration ip classifier list clock rate Interface Configuration color P...

Page 23: ...the ip mirror command has been removed from the CLI for those routers ip policy local input Interface Configuration Profile Configuration None no ipsec isakmp policy rule Global Configuration no ipsec ike policy rule ipv6 policy local input Interface Configuration Profile Configuration None j1 Controller Configuration license l2tp session Global Configuration None lineCoding Controller Configurati...

Page 24: ...uration mode has been removed from the CLI subscriber disconnect rate limit profile Policy List Configuration rate limit profile in Classifier Group Configuration mode remote loopback Controller Configuration show controllers t1 e1 User Exec Privileged Exec show controllers t1 remote User Exec Privileged Exec show ike certificates User Exec Privileged Exec show ipsec certificates show ike configur...

Page 25: ...want to configure authentication do so before you have otherwise configured the DHCP local server When you upgrade from a release numbered lower than Release 7 1 0 all DHCP host routes previously stored in NVS are deleted After the upgrade DHCP clients must reacquire their IP addresses which results in the new host routes being correctly stored in NVS DHCP External Server If you are using DHCP ext...

Page 26: ... 2 4p0 4 and all higher numbered 7 2 x releases and patch releases Release 7 3 4 and all higher numbered 7 3 x releases and patch releases Release 8 0 4 and all higher numbered 8 0 x releases and patch releases Release 8 1 2 and all higher numbered 8 1 x releases and patch releases Release 8 2 3 and all 8 2 3 patch releases Release 9 0 0 and all 9 0 0 patch releases Release 9 0 1 and all 9 0 1 pat...

Page 27: ...port QoS Consequently a particular flow is always hashed to the same link When a member link is removed from a LAG bundle traffic rate is disrupted and traffic flow is reduced When the link goes down and then comes back up the traffic flow is automatically redistributed When counting bits per second on a Fast Ethernet or Gigabit Ethernet interface an E Series router includes 12 bytes for interpack...

Page 28: ...ally transfers existing configurations that use the 0x9200 Ethertype to the 0x88a8 Ethertype The show interface gigabitEthernet command output does not display the following line of output for Gigabit Ethernet modules that do not support SFPs such as the GE Single Mode I O module and GE I O Multi Mode I O modules Primary Secondary link signal detected Primary Secondary link signal not detected Fla...

Page 29: ...the following versions of the OCx STMx ATM and OCx STMx POS line modules OCx STMx ATM line modules with assembly numbers 350 00039 xx 350 80039 xx and 350 90039 xx OCx STMx POS line modules with assembly number 350 10039 xx When you configure 1 5 line module redundancy by using either the 4XOC3 APS MULTIMODE or 4XOC3 APS SINGLE MODE I O module the spare R Mid OCX I O module you install must have a...

Page 30: ...grades using a reload stateful SRP switchover or unified ISSU Upgrades from the following releases are affected by this behavior 7 x x 8 0 x 8 1 x 8 2 x and 9 x x builds created before July 23 2008 Examples of descriptions that are not retained across the upgrade host1 config if ip description 12345678 host1 config ip vrf 123 host1 config vrf description 45678 Examples of descriptions that are ret...

Page 31: ...the Load Errors field is increasing daily for that VR The Load Errors field records any failed routing table distribution attempt as an error Attempts can fail for many reasons during normal operation a failed attempt does not necessarily indicate a problem It is normal to see many load errors per day If the Status field indicates Invalid then the routing table distribution has failed constantly f...

Page 32: ...ress you must also remove the IS IS configuration from the interface and then add the configuration back to the interface by issuing the no router isis and router isis commands When you run IS IS on back to back virtual routers VRs in an IS IS over bridged Ethernet configuration and do not configure different IS IS priority levels on each VR a situation can occur in which both VRs elect themselves...

Page 33: ...module resulting in a delay in the LNS session creation rate The LNS session creation rate returns to its normal rate when NAT dynamic translations are no longer being generated Defect ID 53191 Work around When signaling performance must be optimal avoid the simultaneous configuration of NAT and LNS If you create an L2TP destination profile profileName establish tunnels with the profile and then r...

Page 34: ...t modifying the layer 2 headers For this reason Martini VLAN retagging is not currently supported If you are upgrading to Release 7 1 0 or a higher numbered release from a release numbered lower than Release 7 1 0 and have inter AS option B or C configurations you must explicitly configure MPLS on all inter AS links as in the following example host1 configure terminal host1 config interface fastEt...

Page 35: ...ath ECMP links to connect to the analyzer device the static ARP configuration does not provide failover if the link being selected fails or is disconnected Therefore to provide continued connectivity if the link fails when using ECMP enable the ip proxy arp unrestricted command on the next hop router for each ECMP interface As a result when the link fails the router sends an ARP request to identif...

Page 36: ...d only one of them defined the forwarding behavior The rule action that was applied was in the order from highest to lowest preference next interface filter next hop forward The applied rule was the rule whose behavior was seen by forwarded packets For example if a policy had both a next interface and a filter rule then the next interface was applied If a policy had a next hop and a filter rule th...

Page 37: ... PPPoE are not counted at the PPPoE interface Instead PPPoE data packets are counted at the PPP interface that sits on the PPPoE interface Use the show ppp interface command to display the data packets Control packets for PPPoE are counted at the PPPoE interface use the show pppoe interface command to display the control packets QoS When you are configuring compound shared shaping using explicit c...

Page 38: ...change in default behavior For releases before Release 7 2 0 you could not configure scheduler nodes as active constituents of the simple shared shaper except for the best effort node To recover the default behavior available before Release 7 2 0 or to select active constituents that are different use simple explicit shared shapers to select best effort nodes only RADIUS JunosE Software provides e...

Page 39: ... in a VR other than default SSH can sometimes become disabled This happens if SSH attempts to bind with a VR before the VR comes back up after the restart In this event a warning message is generated to alert you to the fact that SSH is disabled in that VR You must manually re enable SSH either by accessing the console VTY or creating a Telnet session to the router Trap Name Expected Enterprise OI...

Page 40: ...SRP module cannot send or receive frames including the protocol frames that signal graceful restart behavior with OSPF and IS IS peers If the configured hold time is too short peers might mistakenly declare the adjacency down during the time in which the graceful restart is taking place Defect ID 65132 Work around Increase the hold time to provide sufficient time for interface synchronization befo...

Page 41: ...e When the router detects an unmatched packet it generates a trigger event that determines whether to create a dynamic subscriber interface or configure an existing interface To configure packet detection on the router use the ip auto detect ip subscriber command System ERX routers display different behavior from E120 routers and E320 routers when reporting modules as inactive ERX routers report a...

Page 42: ... Defect ID 34842 45063 Work around Remove the filter before you remove the interface Alternatively if you remove the interface first then you must remove all filters associated with all IP interfaces System Logging If you enable engineering logs and set the control network logs to a level of notice or lower down from the default of error you might see erroneous controlNetwork log messages like the...

Page 43: ...rcuits as passive OSPF interfaces and that has established OSPF adjacencies and IBGP peers configured on Gigabit Ethernet interfaces the transmission of OSPF hello packets might be affected until all the NBMA interfaces have initialized Defect ID 46157 Work around Either remove the passive OSPF interface statements on the NBMA interfaces or statically configure the OSPF cost on the NBMA interfaces...

Page 44: ...is passed directly to PPPoE for negotiation rather than being discarded Defect ID 51757 Work around Incremental InPacketDiscards during call setup do not necessarily indicate a problem However we recommend you investigate an excessive count because that might indicate a connection that cannot be successfully brought up for some reason such as RADIUS denials or improper configuration The inPacketOc...

Page 45: ...bers summary command may display some of the DHCP subscribers Defect ID 180176 Work around Try using the dhcp delete binding all command If this does not clear the subscribers you may want to reload the line module to avoid further issues DHCP DHCP packets are not forwarded to the DHCP server over dynamically created interfaces when all of the following are true Defect ID 180343 DHCP relay or DHCP...

Page 46: ...et stack sends a renew message Defect ID 87087 DHCP NAK packets are sent from a different VLAN than the one on which the renew request is received on a router that is configured with dynamic VLANs DHCP local server and automatically created dynamic subscriber interfaces This behavior occurs only after a link flap has taken place Defect ID 87062 DoS Protection A Telnet session closes when sending i...

Page 47: ...ollowing configuration fails because S VLAN 22 falls within the previously specified S VLAN range of 21 23 host1 config if vlan bulk config BulkDHCPCnfg1 svlan range 21 23 401 426 host1 config if vlan bulk config BulkDHCPCnfg1 svlan range 21 23 427 712 host1 config if vlan bulk config BulkCezarCnfg2 svlan range 22 22 101 110 Work around You can do either of the following to avoid this problem Spec...

Page 48: ... ID of 0 assigned to an interface can prevent packets from being properly forwarded Defect ID 176125 ICR When you configure ICR settings using a CLI macro ICR commands are run in quick succession Sometimes in such a scenario the active SRP module resets if the event that causes the change of state of the VRRP instance reaches the ICR application before the ICR partition has been created Defect ID ...

Page 49: ...GMPv2 router is present on the network do not configure version 3 with the ip igmp proxy version command on that network interface Version 2 is the default The default value for the IGMPv3 proxy unsolicited report interval timer should be 1 second rather than 10 seconds the value for v2 Defect ID 46040 When more than about 100 000 mapped OIF entries are configured on a virtual router issuing the n...

Page 50: ...d for the hardware multicast packet replication feature Logical port 20 and the hardware multicast replication feature are not supported on the ES2 S3 GE 20 IOA in this release Defect ID 84727 When you change the demultiplexer type on a primary interface that has 1024 demultiplexer table entries the ICC ping threshold times out due to the removal of the old entries and the addition of the new ones...

Page 51: ...P sessions over 500 tunnels Defect ID 180147 MLD MLDv2 proxy is not supported Defect ID 46038 The E Series router MLDv2 proxy does not operate correctly in the presence of MLDv1 queriers Defect ID 46039 46045 Work around If an MLDv1 router is present on the network configure version 1 with the ipv6 mld proxy version command on that network interface Version 2 is the default The default value for t...

Page 52: ...bers Defect ID 179081 Work around Issue the clear ip mobile binding all command before you issue the no virtual router command The clear command clears all the MIP subscribers and sends a RADIUS Acct Stop message with the appropriate accounting statistics for the subscribers MPLS When MPLS and IS IS are configured on Ethernet interfaces you cannot delete the interface after the IP address is remov...

Page 53: ...s sent in fragments Because of this fragmentation the ES2 10G LM generates the following error message Defect ID 81768 pc 0x9e5c88 fatalPanic void offset 0x8 Netflow Flow sampling stops after a cold switchover on a router that is configured with 16 VRs and 32 interfaces per VR when all flows are passing through the configuration 32 flows per VR Defect ID 74477 Work around After the cold switchover...

Page 54: ...f you use the policy list option with the log severity severityValue policyMgrPacketLog policy list policyListName command when logging policyMgrPacketLog events Defect ID 87203 When you reload the slot holding a GE 2 or GE HDE line module and you have configured more than about 2000 policies with rate limiting on that module the drop count becomes more than expected This unexpected drop count doe...

Page 55: ...out of up to 5 minutes ensues during which the SRP module CPU utilization goes to 100 percent Defect ID 62252 The compound shared shaping feature does not work properly on egress forwarding ASIC 2 EFA2 based ATM line modules when the shared shaper is queue controlled as opposed to node controlled In a node controlled configuration in which you configure the shared shaping rate on the best effort s...

Page 56: ...ffic may be dropped on OC12 STM4 ATM interfaces if you have shaped the port rate to more than 542 Mbps Defect ID 83785 Work around Do not exceed a shaped port rate of 542 Mbps Incorrect output is sent to the CLI the first time you enter Global Configuration mode or issue the show subscribers command after viewing the VLAN subinterface over which a subscriber is connected Defect ID 84507 When QoS r...

Page 57: ...er session subscriberName interface interfaceType interfaceSpecifier show service management subscriber session subscriberName interface interfaceType interfaceSpecifier service session serviceName This problem also occurs when a subscriber is authenticated using a RADIUS server for a combined IPv4 and IPv6 service in a dual stack Work around To avoid this problem use the show service management o...

Page 58: ...the SSCC status enable disable while IPv6 interfaces are configured might cause the SRP to reset Defect ID 179537 Stateful SRP Switchover High Availability and IP Tunnels When you issue show commands as soon as the CLI is available after a stateful SRP switchover the commands can hang until the warm restart is completed Defect ID 85306 A packet loss sometimes occurs during stateful SRP switchover ...

Page 59: ...cct Terminate Cause attributes Defect ID 181043 MAC address validation not working for IP auto detect sessions Defect ID 86446 Dynamic subscriber interfaces continue to remain in the down or not present operational state in either of the following scenarios Defect ID 81269 If you configured a dynamic interface column such as a dynamic bridged Ethernet interface dynamic VLAN interface or an ATM int...

Page 60: ...slog virtual router default command incorrectly displays logs for multiple syslog destinations when you add a log to only one syslog destination The show log configuration command shows the correct configuration Defect ID 84082 TCP The SRP module resets in any of the following circumstances on an E320 router that has a line module configured with 5000 ANCP adjacencies Defect ID 176916 When you iss...

Page 61: ... release to the router before removing the subsystem file from the exclusion list you must copy the release to the router again to ensure that all subsystem files are included in the release During the unified ISSU operation if you modify the router configuration after the initialization phase of the process is completed and before you issue the issu start command to commence the upgrade phase of ...

Page 62: ...0861 BGP SRP reset type processor exception 0x700 program task bgp Defect ID 90031 LM10 reset type exception 0x68616c74 halt Defect ID 90100 Bridged Ethernet New bridge subint in status NotPresent Defect ID 90096 Line module crashes when performing SNMP set operation file ethernet cc line 2687 task scheduler Defect ID 90708 DHCP SRP module reset type panic file dhcpRelay cc task dhcpRelay_dhcpRe l...

Page 63: ...gVlanReceive Defect ID 90857 Forwarding Dynamic VLAN sub interfaces fail to be created after shutdown and modify VLAN bulk config vlan range Defect ID 89962 VLAN bulk config cannot be removed after certain CLI sequences Defect ID 90214 VLAN subinterfaces fail to be created when LAG major port is down Defect ID 90606 LM10A crash SRA 2048 file ic1Detector cc line 1013 message Ic1Detector requestReco...

Page 64: ...edundancy Line card redundancy is broken when a primary line card is STUCK IN BOOTING state and the router is reloading Defect ID 90898 MPLS LM10U reset type panic file aptationLayer cc line 3159 Hw2MplsAdaptationLayer setEgressDirectNextHopLabel Defect ID 90732 OSPF OSPF adjacency might flap when ISSU is performed with OSPF default Hello and Dead interval timers Defect ID 90562 BNGSTL 11 0 0b1 5 ...

Page 65: ...ntsChange Defect ID 90246 SRC Software and SDX Software On an ERX router configured for a LAG interface the show sae interfaces and the show sae subscribers command outputs display NasPortID as the interface name of DSI interface created Defect ID 90208 SRP standby SRP reset type panic file 1xCmBackplane cc line 1211 lr Ar1CmSwcm allocStreamId Defect ID 90718 ...

Page 66: ...red Releases special hardware notice dated 31 March 2006 The Upgrading to JunosE Software Release 6 x x or Higher Numbered Releases from Release 5 1 1 or Lower Numbered Releases section in the JunosE Release Notes for the following releases Releases 6 0 5 6 1 4 and 6 1 5 Releases 7 1 2 7 1 3 7 1 4 7 2 x 7 3 x Releases 8 x 9 x 10 x 11 0 x and 11 1 x The Upgrading to JunosE Software Release 6 x x or...

Page 67: ... 10G ADV LM The SRC Software and SDC Software section in the Subscriber Management Maximums table for the ERX310 ERX7xx and ERX14xx routers in Appendix A System Maximums of the JunosE Release Notes for the following releases incorrectly mentioned that the maximum number of SRC interfaces supported on all the ERX routers was 48 000 Release 9 0 3 Release 9 1 3 Releases 9 2 2 and 9 2 3 Releases 9 3 1...

Page 68: ... the physical space provided for the chassis The strain relief and bend radius requirements of the optical fiber cables may exceed the specified depth of the chassis and the cable management bracket In JunosE System Basics Configuration Guide Chapter 4 Configuring SNMP the Monitoring Interface Tables section contains a topic whose heading is incorrect Although the title of that section is show snm...

Page 69: ...g Configuration Guide Chapter 2 Configuring IGMP the bulleted list of field descriptions and output example for the show ip igmp interface command incorrectly display the field name for the number of multicast groups that the interface has discovered as Groups learned The correct label for this field is Groups learnt In the Configuring Graceful Restart section in JunosE IP IPv6 and IGP Configurati...

Page 70: ...service providers must do to enable subscriber traffic to reach all interfaces The following note accurately describes what to do The ICR Scaling Considerations section in JunosE 10 3 x Service Availability Configuration Guide Chapter 6 Managing Interchassis Redundancy incorrectly states that ICR supports 1 3 or 1 N subscriber redundancy ICR supports 1 1 subscriber redundancy only The Example Conf...

Page 71: ...e working of the BGP graceful restart feature The bgp graceful restart and neighbor graceful restart command sections incorrectly state that advertisement of the graceful restart capability is enabled by default The correct default behavior of these commands is that BGP graceful restart is disabled and advertisement of the graceful restart capability is also disabled both globally and for specifie...

Page 72: ... paragraph The block that is common to the variable sized entries is not available for 144 bit CAM entries when you configure any 288 bit or 576 bit entries even though you remove them later It is also not available for any 288 bit or 576 bit entries when the 144 bit entries spill into this block even though you remove the 144 bit entries later In the JunosE documentation for Release 9 3 x 10 x x ...

Page 73: ...terface Use the same address as the loopback interface Lp in the parent router PE2 host1 config virtual router PE2 CE2 host1 PE2 CE2 config interface loopback 0 host1 PE2 CE2 config if ip address 2 2 2 2 255 255 255 255 host1 PE2 CE2 config if exit host1 PE2 CE2 config host1 PE2 CE2 config interface tunnel gre MTI 22 host1 PE2 CE2 config if ip unnumbered loopback 0 host1 PE2 CE2 config if ip pim s...

Page 74: ...s receiving peers since JunosE Release 5 1 0 In the JunosE Command Reference Guide A to M the description of the mpls ldp graceful restart reconnect time command incorrectly states that the no version restores the default value of 120 seconds The correct default value is 140 seconds The description of the neighbor graceful restart command in the JunosE Command Reference N to Z incorrectly states t...

Page 75: ...lease 7 1 0 in which it was introduced The show memory management protection command is available in Privileged Exec mode You can use this command to display the information about memory management protection of the router The syntax for this command is show memory management protection detail filter The command can be used only in the support mode and is not user configurable In the JunosE System...

Page 76: ...JunosE 10 3 2 Release Notes 68 Errata ...

Page 77: ...aximums for ERX310 ERX7xx and ERX14xx Section General router values General System Maximums on page 70 Physical layer values Physical and Logical Density Maximums on page 71 Link layer values Link Layer Maximums on page 74 Routing protocol and performance values Routing Protocol Maximums on page 79 Policy and QoS values Policy and QoS Maximums on page 83 Tunneling values Tunneling Maximums on page...

Page 78: ...able 1 General System Maximums Feature ERX310 ERX705 and ERX710 ERX1410 ERX1440 Fabric size 10 Gbps 5 or 10 Gbps 10 Gbps 40 Gbps Chassis per 7 foot rack 14 6 3 3 NTP clients 1000 1000 1000 1000 NTP servers 300 300 300 300 Sessions per chassis simultaneous Telnet FTP SSH in any combination 30 30 30 30 Virtual routers per chassis 1000 1000 1000 1000 Virtual routers per line module ASIC 1000 1000 100...

Page 79: ...sE Physical Layer Configuration Guide Chapter 5 Configuring Ethernet Interfaces 3 When you pair the GE HDE line module with the GE 8 I O module on the ERX1440 router you can terminate up to 96 Gigabit Ethernet interfaces Slots 2 and 4 on the ERX1440 router support two Gigabit Ethernet interfaces at wire rate the remaining 10 slots support one Gigabit Ethernet interface at wire rate On the ERX310 r...

Page 80: ... ports per chassis OC12 STM4 I O modules 2 4 5 8 12 12 OC12 STM 4 POS ports per chassis OC12 STM4 I O modules 2 4 5 4 12 12 OC48 STM16 POS ports per chassis OC48 FRAME I O modules ERX1440 router only 2 T3 unchannelized ports per chassis 4xDS3 ATM I O modules 8 16 20 32 48 48 T3 unchannelized ports per chassis CT3 T3 12 I O modules 24 48 60 96 144 144 Logical density per chassis Logical E1s per cha...

Page 81: ...2000 500 per OC3 STM1 Logical fractional T1s DS0 per CT3 T3 F0 line module 1992 166 per T3 1992 166 per T3 1992 166 per T3 1992 166 per T3 Logical fractional T3s DS3 per COCX F3 line module 12 12 12 12 Logical T1s per cOCx STMx F0 line module 336 84 per OC3 STM1 336 84 per OC3 STM1 336 84 per OC3 STM1 336 84 per OC3 STM1 Logical T1s per CT3 T3 F0 line module 336 28 per T3 336 28 per T3 336 28 per ...

Page 82: ...tatic The JunosE Software supports up to 10 000 PPP interfaces with EAP authentication negotiation configured Performance and scalability is unchanged when EAP is not configured 2 The total maximum number of Ethernet subinterfaces that can be active at any one time on an ERX310 router an ERX7xx router or an ERX14xx router is limited by the number of slots per chassis Of this total you can configur...

Page 83: ... chassis 100 100 100 100 ATM VP VC addresses per line module OCx STMx DS3 ATM 20 bit 20 bit 20 bit 20 bit OC3 STM1 GE FE 20 bit 20 bit 20 bit 20 bit ATM VP tunnels per port all supported modules 256 256 256 256 Bridged Ethernet interfaces per chassis See Note 1 on page 74 16 000 32 000 32 000 48 000 Bridged Ethernet interfaces per line module OCx STMx DS3 ATM 8192 8192 8192 8192 OC3 STM 1 GE FE 81...

Page 84: ... 16 384 OC3 2 GE APS I O 4096 4096 4096 4096 Ethernet VLAN bulk configuration VLAN ranges per chassis 300 300 300 300 Ethernet VLAN bulk configuration VLAN ranges per line module 300 300 300 300 Ethernet VLAN overriding profile assignments per chassis 200 200 200 200 Ethernet VRRP VRIDs per line module ASIC 800 800 800 800 Frame Relay virtual circuits per chassis 2000 5000 12 000 12 000 Frame Rela...

Page 85: ...f interface columns MLPPP bundles per chassis 12 000 12 000 12 000 12 000 MLPPP bundles per line module The maximum number of MLPPP bundles supported per line module is the lesser of the maximum number of MLPPP bundles supported per chassis or of the maximum number of interfaces supported on the line module For more information see the JunosE Link Layer Configuration Guide PPP interfaces per chass...

Page 86: ... 8000 Subinterfaces per GE 2 line module 8000 8000 Subinterfaces per GE HDE line module 8000 8000 Subinterfaces per OCx STMx DS 3 ATM line module 8000 8000 8000 8000 Subinterfaces per OC3 STM 1 GE FE line module 8000 8000 8000 8000 Transparent bridging and VPLS Bridge groups or VPLS instances per chassis 1024 1024 1024 1024 Bridge interfaces per line module in bridge groups or VPLS instances 8000 ...

Page 87: ...s a maximum of 16 000 IP network interfaces For all these models the interfaces can be any combination of dynamic or static 3 These values are subject to limitations on available SRP module memory which varies according to your router configuration 4 Depending on your configuration the router may support more routing table entries or fewer routing table entries than this value In any case you can ...

Page 88: ...ERX1440 BFD Sessions per line module 50 50 50 50 ECMP maximum paths to a destination BGP IS IS MPLS OSPF RIP 16 16 16 16 IPv4 forwarding table entries See Note 1 on page 79 Chassis with only ASIC modules 1 048 576 1 048 576 1 048 576 1 048 576 IP network interfaces IPv4 and IPv6 Per chassis See Note 2 on page 79 16 000 32 000 32 000 48 000 Per line module ASIC 8000 8000 8000 8000 IPv4 routing prot...

Page 89: ...0 Total Martini circuits per chassis See Note 7 on page 79 16 000 16 000 16 000 32 767 External Martini circuits per chassis 16 000 16 000 16 000 32 767 Internal Martini circuits local cross connects per chassis 16 000 16 000 16 000 32 767 Mobile IP bindings per chassis 48 000 Multicast routes IPv4 and IPv6 Forwarding entries S G pairs per chassis See Note 8 on page 79 16 384 16 384 16 384 16 384 ...

Page 90: ...em Maximums Response Time Reporter simultaneous operations per VR 500 500 500 500 VRRP VRIDs per line module ASIC See Ethernet VRRP VRIDs per line module ASIC on page 76 Table 4 Routing Protocol Maximums continued Feature ERX310 ERX705 and ERX710 ERX1410 ERX1440 ...

Page 91: ...r most configurations each classifier entry in a policy consumes one CAM entry However a policy that has only the default classifier consumes no CAM resources Policies that use CAM hardware classifiers consume one interface attachment resource regardless of the number of classifier entries in a policy Table 5 Policy and QoS Maximums Feature ERX310 ERX705 and ERX710 ERX1410 ERX1440 QoS queues per A...

Page 92: ...ents on all other line modules 16 000 16 000 16 000 16 000 Combined ATM Frame Relay GRE L2TP LNS only MPLS and VLAN interface attachments 8191 8191 8191 8191 Rate limiters Egress per ASIC line module 24 575 24 575 24 575 24 575 Ingress per ASIC line module 24 575 24 575 24 575 24 575 Policy statistics blocks Egress per ASIC line module 256 000 256 000 256 000 256 000 Ingress per ASIC line module 2...

Page 93: ...ximums 85 Appendix A System Maximums Secure policies for packet mirroring Per ASIC line module 1022 1022 1022 1022 Per chassis 2400 2400 2400 2400 Table 5 Policy and QoS Maximums continued Feature ERX310 ERX705 and ERX710 ERX1410 ERX1440 ...

Page 94: ...erview Table 6 Tunneling Maximums Feature ERX310 ERX705 and ERX710 ERX1410 ERX1440 DVMRP IP in IP tunnels per chassis 4000 4000 4000 4000 DVMRP IP in IP tunnels per line module See Note 1 on page 86 GE 2 with shared tunnel server ports provisioned 4000 4000 GE HDE with shared tunnel server ports provisioned 4000 4000 IPSec Service Module DVMRP IPSec tunnels 4000 4000 4000 4000 Service Module SM 40...

Page 95: ...nnel server ports provisioned 8000 8000 IPSec Service Module ISM L2TP IPSec sessions 5000 5000 5000 5000 Service Module SM 16 000 16 000 16 000 16 000 L2TP tunnels per chassis 8000 8000 8000 8000 L2TP tunnels per line module See Notes 1 and 3 on page 86 GE 2 with shared tunnel server ports provisioned 8000 8000 GE HDE with shared tunnel server ports provisioned 8000 8000 IPSec Service Module L2TP ...

Page 96: ... of 32 000 static major interfaces Although the ERX1440 router supports a maximum of 48 000 static major interfaces for PPPoE the PPPoE static limit is enforced at the subinterface level which has a limit of 32 000 The ERX705 ERX710 and ERX1410 routers support a maximum of 32 000 interfaces of all types combined the ERX310 router supports a maximum of 16 000 interfaces of all types combined For th...

Page 97: ...thentication server Local user databases per chassis 100 100 100 100 Users per local user database 100 100 100 100 Users for all local user databases 100 100 100 100 RADIUS requests Concurrent RADIUS authentication requests 4000 4000 4000 32 000 Concurrent RADIUS accounting requests 4000 4000 4000 96 000 RADIUS route download server downloaded routes per chassis 32 000 32 000 32 000 32 000 Service...

Page 98: ...faces per chassis 16 000 32 000 32 000 48 000 Dynamic subscriber interfaces per line module 8000 8000 8000 8000 Static subscriber interfaces per chassis 16 000 32 000 32 000 48 000 Static subscriber interfaces per line module 8000 8000 8000 8000 Table 7 Subscriber Management Maximums continued Feature ERX310 ERX705 and ERX710 ERX1410 ERX1440 ...

Page 99: ...and VRF instance is running a routing protocol 2 The maximum of 3000 VRs and VRFs can be achieved only with the SRP 120 and SRP 320 modules which have 4 GB of memory The limits cannot be achieved with the SRP 100 module which has 2 GB of memory Table 8 General System Maximums Feature E120 E320 Fabric size 120 Gbps 100 Gbps 320 Gbps Chassis per 7 foot rack 6 3 NTP clients 1000 1000 NTP servers 300 ...

Page 100: ...alled in slot 2 or slot 4 you cannot install another line module in slot 3 or slot 5 In this case you can only install the ES2 4G LM in slots 0 1 and 6 11 therefore the maximum number of ports and the forwarding performance per chassis is reduced for the IOAs that pair with the ES2 4G LM With a 320 Gbps fabric configuration on the E320 router you can install up to 12 combinations of ES2 10G Uplink...

Page 101: ...1 OC12 2 STM4 POS IOAs 24 48 OC48 STM16 ports per chassis ES2 S1 OC48 STM16 POS IOAs 6 12 Logical density per chassis Logical OC3 STM1 per chassis 96 192 Logical OC12 STM4 per chassis 24 48 Logical OC48 STM16 per chassis 6 12 Table 9 Physical and Logical Density Maximums continued Feature E120 E320 ...

Page 102: ...tication negotiation configured Performance and scalability is unchanged when EAP is not configured 4 The E120 router supports a maximum of 64 000 Ethernet subinterfaces that can be active at any one time The E320 router supports a maximum of 96 000 Ethernet subinterfaces that can be active at any one time Of this total you can configure all single tagged VLAN subinterfaces all double tagged S VLA...

Page 103: ...00 128 000 ATM bulk configuration VC ranges per chassis 300 1025 ATM bulk configuration VC ranges per line module 300 1025 ATM bulk configuration total VCs per chassis 192 000 384 000 ATM bulk configuration total VCs per line module ES2 4G LM and OCx STMx ATM IOA 32 000 32 000 ATM bulk configuration overriding profile assignments per chassis 100 100 ATM VCs per chassis See Note 2 on page 94 64 000...

Page 104: ...ation Links per LAG bundle 8 8 LAGs bundles per chassis 64 64 Ethernet S VLANs per chassis See Notes 2 4 and 5 on page 94 64 000 96 000 Ethernet S VLANs per IOA See Note 6 on page 94 ES2 S1 GE 4 IOA with ES2 4G LM 16 384 16 384 ES2 S1 GE 8 IOA with ES2 4G LM or ES2 10G LM 16 384 16 384 ES2 S1 GE 8 IOA with ES2 10G ADV LM 32 768 32 768 ES2 S1 10GE IOA with ES2 4G LM 16 384 16 384 ES2 S2 10GE PR IOA...

Page 105: ...0G Uplink LM See Note 5 on page 94 4096 4096 ES2 S3 GE 20 IOA with ES2 10G LM 16 384 16 384 ES2 S3 GE 20 IOA with ES2 10G ADV LM 32 768 32 768 Ethernet VLAN major interfaces over Bridged Ethernet Interfaces per IOA See Note 8 on page 94 ES2 S1 GE 4 IOA with ES2 4G LM 8192 8192 ES2 S1 GE 8 IOA with ES2 4G LM ES2 10G LM or ES2 10G ADV LM 8192 8192 ES2 S1 10GE IOA with ES2 4G LM 8192 8192 ES2 S2 10GE...

Page 106: ...chassis or of the maximum number of interfaces supported on the line module For more information see the JunosE Link Layer Configuration Guide PPP major interfaces per chassis See Notes 2 and 3 on page 94 64 000 96 000 PPP major interfaces per line module ignoring physical interface constraints ES2 4G LM 16 000 16 000 ES2 10G LM 16 000 16 000 ES2 10G ADV LM 32 000 32 000 PPP subinterfaces per chas...

Page 107: ...sis See Notes 2 and 3 on page 94 64 000 96 000 PPPoE subinterfaces per line module ES2 4G LM 16 000 16 000 ES2 10G LM 16 000 16 000 ES2 10G ADV LM 32 000 32 000 Transparent bridging and VPLS Bridge groups or VPLS instances per chassis 1024 1024 Bridge interfaces per line module in bridge groups or VPLS instances 8000 8000 Bridge interfaces per chassis in bridge groups or VPLS instances 32 000 32 0...

Page 108: ...tations on available SRP module memory which varies according to your router configuration 4 Depending on your configuration the router may support more routing table entries or fewer routing table entries than this value In any case you can choose to limit the number of routes that can be added to the routing table on a per VR or per VRF basis by means of the maximum routes command 5 The maximum ...

Page 109: ... 500 000 1 500 000 IP next hops egress FECs used to represent the IP addresses of next hop routers on Ethernet interfaces 1 000 000 1 000 000 MPLS next hops egress FECs when graceful restart is not enabled 500 000 500 000 MPLS next hops egress FECs when graceful restart is enabled 250 000 250 000 MPLS forwarding entries when graceful restart is not enabled 64 000 64 000 MPLS forwarding entries whe...

Page 110: ... 32 767 Internal Martini circuits local cross connects per chassis 16 000 32 767 Mobile IP bindings per chassis 96 000 Multicast routes IPv4 and IPv6 Forwarding entries S G pairs per chassis See Note 7 on page 100 16 384 16 384 Outgoing interfaces per chassis See Note 8 on page 100 65 536 65 536 Response Time Reporter simultaneous operations per VR 500 500 Response Time Reporter maximum tests per ...

Page 111: ... policy The line modules support policy attachments based on the following considerations IPv4 Up to 2 ingress policy attachments and 1 egress policy attachment Secure policy Up to 1 ingress policy attachment and 1 egress policy attachment ES2 10G LM and ES2 10G ADV LM only VLANs Up to 1 ingress policy attachment and 1 egress policy attachment 3 Secure policies are not supported on the ES2 10G Upl...

Page 112: ...ments 16 383 16 383 ES2 10G ADV LM IP interface attachments 32 000 32 000 ES2 10G ADV LM VLAN interface attachments 32 000 32 000 ES2 10G Uplink LM IP interface attachments 16 383 16 383 ES2 10G Uplink LM VLAN interface attachments 8191 8191 Policy egress interface attachments per line module See Note 2 on page 103 ES2 4G LM combined IP and IPv6 interface attachments 32 767 32 767 ES2 4G LM combin...

Page 113: ... 10G Uplink LM 64 000 64 000 Policy statistics blocks egress per line module ES2 4G LM 256 000 256 000 ES2 10G LM 256 000 256 000 ES2 10G ADV LM 512 000 512 000 ES2 10G Uplink LM 256 000 256 000 Policy statistics blocks ingress per line module ES2 4G LM 256 000 256 000 ES2 10G LM 256 000 256 000 ES2 10G ADV LM 512 000 512 000 ES2 10G Uplink LM 256 000 256 000 Parent groups egress per line module E...

Page 114: ...rent groups only 8191 8191 ES2 10G Uplink LM internal parent groups only 8191 8191 Software lookup blocks per line module ES2 4G LM 16 383 16 383 ES2 10G LM 16 383 16 383 ES2 10G ADV LM 32 000 32 000 ES2 10G Uplink LM 16 383 16 383 Secure policies for packet mirroring Per chassis 2400 2400 Per line module See Note 3 on page 103 1022 1022 Table 12 Policy and QoS Maximums continued Feature E120 E320...

Page 115: ...E120 E320 DVMRP IP in IP tunnels per chassis 4000 4000 DVMRP IP in IP tunnels per line module with shared tunnel server ports provisioned 4000 4000 DVMRP IP in IP tunnels per ES2 S1 Service IOA See Note 1 on page 107 4000 4000 GRE tunnels per chassis 4000 4000 GRE tunnels per line module with shared tunnel server ports provisioned 4000 4000 GRE tunnels per ES2 S1 Service IOA See Note 1 on page 107...

Page 116: ...Maximums L2TP tunnels per line module with shared tunnel server ports provisioned See Note 2 on page 107 8000 8000 L2TP tunnels per ES2 S1 Service IOA See Note 1 and Note 2 on page 107 16 000 16 000 Table 13 Tunneling Maximums continued Feature E120 E320 ...

Page 117: ...stored for all DHCP relay and DHCP relay proxy instances that is for all virtual routers 2 On the E120 router the SRP 120 and the SRP 320 support a maximum of 64 000 interfaces On the E320 router the SRP 320 supports a maximum of 96 000 interfaces The SRP 100 supports a maximum of 64 000 interfaces 3 For DHCPv6 local server up to 32 000 subscribers and clients are supported on PPP ATM and PPPoE AT...

Page 118: ...sis 64 000 96 000 Service Manager Service definitions 2048 2048 Service sessions active 131 072 131 072 Active subscriber sessions 49 152 49 152 SRC Software and SDX Software COPS client instances 200 200 SRC clients 200 200 SRC interfaces 48 000 96 000 Subscriber interfaces See Note 2 on page 109 Dynamic subscriber interfaces per chassis 64 000 96 000 Dynamic subscriber interfaces per ES2 4G LM 1...

Search results

Summary of Contents for JUNOSe 10.3.2

Reviews:

Related manuals for JUNOSe 10.3.2

Brands by name

Popular brands

Juniper JUNOSe 10.3.2, Release Note

Search results

Summary of Contents for JUNOSe 10.3.2

Reviews:

Related manuals for JUNOSe 10.3.2

Brands by name

Popular brands