Power Over Ethernet (Poe); Security; Virtual Lans (Vlans) - Juniper JUNOS OS 10.4 - RELEASE NOTES Release Note

Changes in Default Behavior and Syntax in Junos OS Release 10.4 for SRX Series Services Gateways and J Series Services Routers
Table 9: VLAN IDs Reserved for Internal Use
VLAN IDs Reservations
SRX100
3968-4047 ———
4093 Reserved
4094 Reserved*
Copyright © 2010, Juniper Networks, Inc.
Attach the scheduler map to all member links
set class-of-service interfaces t1-2/0/0 unit 0 scheduler-map lsqlink_map
Even after this configuration, if out-of-range sequence number drops are observed on
reassembly side, increase the drop-timeout of the bundle to 200 ms

Power over Ethernet (PoE)

On SRX210-PoE devices, SDK packages might not work.

Security

J Series devices do not support the authentication order
in the
ldap edit access profile profile-name authentication-order
the
order radius password
Any change in the Unified Access Control's (UAC) contact interval and timeout values
in the SRX Series or J Series device will be effective only after the next reconnection
of the SRX Series or J Series device with the Infranet Controller.
The maximum size of a redirect payload is 1450 bytes. The size of the redirect URL is
restricted to 1407 bytes (excluding a few HTTP headers). If a user accesses a destination
URL that is larger than 1407 bytes, the Infranet Controller authenticates the payload,
the exact length of the redirect URL is calculated, and the destination URL is trimmed
such that it can fit into the redirect URL. The destination URL can be fewer than 1407
bytes based on what else is present in the redirect URL, for example, policy ID. The
destination URL in the default redirect URL is trimmed such that the redirect packet
payload size is limited to 1450 bytes, and if the length of the payload is larger than
1450 bytes, the excess length is trimmed and the user is directed to the destination
URL that has been resized to 1450 bytes.

Virtual LANs (VLANs)

Native-vlan-id can be configured only when either
trunk is configured. The commit error has been corrected, which was
interface-mode
previously indicating
vlan-tagging
On SRX100, SRX210, SRX220, SRX240, and SRX650 devices, the following VLAN IDs
are reserved for internal use and cannot be used on customer-facing interfaces:
SRX210
———
Reserved
Reserved*
or .
ldap password
flexible-vlan-tagging
mode instead of
flexible-vlan-tagging
SRX220 SRX240
——— Reserved
Reserved Reserved
Reserved* Reserved*
password radius or password
command. Instead, use
mode or
mode.
SRX650
Reserved
Reserved
Reserved*
123