Command-Line Interface (Cli) - Juniper JUNOS 10.1 - RELEASE NOTES REV 4 Release Note

Known Limitations in JUNOS Release 10.1 for SRX Series Services Gateways and J Series Services Routers
SRX Series devices have the following limitations:
J Series devices have the following limitations:

Command-Line Interface (CLI)

On SRX210 and SRX240 devices, J-Web crashes if more than nine users log in to the
device by using the CLI.
The number of users allowed to access the device is limited as follows:
Known Limitations in JUNOS Release 10.1 for SRX Series Services Gateways and J Series Services Routers
The default configuration for other SRX Series devices and all J Series devices
does not enable Ethernet switching. However, if you have enabled Ethernet
switching, be sure to disable it before enabling clustering on these devices
too.
For more information, see the "Disabling Switching on SRX100, SRX210,
and SRX240 Devices Before Enabling Chassis Clustering" section in the
JUNOS Software Security Configuration Guide.
Only two of the 10 ports on each PIC of 40-port 1-Gigabit Ethernet I/O cards
(IOCs) for SRX5600 and SRX5800 devices can simultaneously enable IP address
monitoring. Because there are four PICs per IOC, this permits a total of eight
ports per IOC to be monitored. If more than two ports per PIC on 40-port 1-Gigabit
Ethernet IOCs are configured for IP address monitoring, the commit will succeed
but a log entry will be generated, and the accuracy and stability of IP address
monitoring cannot be ensured. This limitation does not apply to any other IOCs
or devices.
SRX3400, SRX3600, SRX5600, and SRX5800 devices have the following
limitations:
IP address monitoring is not permitted on redundant Ethernet interface LAGs
or on child interfaces of redundant Ethernet interface LAGs.
In-service software upgrade (ISSU) does not support version downgrading.
That is, ISSU does not support running an ISSU install of a software release
package earlier or with a smaller release number than the currently installed
version.
Only redundant Ethernet interfaces (reth) are supported for IKE external
interface configuration in IPsec VPN. Other interface types can be configured
but IPsec VPN might not work
On SRX3000 and SRX5000 line chassis clusters, screen statistics data can be
gathered on the primary device only.
A Fast Ethernet port from a 4-port Ethernet PIM cannot be used as a fabric link
port in a chassis cluster.
For SRX210 devices: four CLI users and three J-Web users
For SRX240 devices: six CLI users and five J-Web users
133