Limitations In Junos Os Release 10.4 For Ex Series Switches; Access Control And Port Security; Class Of Service; Firewall Filters - Juniper JUNOS OS 10.4 - RELEASE NOTES Release Note

Related
Documentation

Limitations in Junos OS Release 10.4 for EX Series Switches

Copyright © 2010, Juniper Networks, Inc.
When you upgrade from Junos OS releases earlier than Release 10.2 to Junos OS Release
10.2 or later, you must configure custom rewrite rules and assign them to an interface or
assign the system-defined rewrite rules to an interface for rewrites to occur.
New Features in Junos OS Release 10.4 for EX Series Switches on page 178
Limitations in Junos OS Release 10.4 for EX Series Switches on page 181
Outstanding Issues in Junos OS Release 10.4 for EX Series Switches on page 184
Resolved Issues in Junos OS Release 10.4 for EX Series Switches on page 189
Errata in Documentation for Junos OS Release 10.4 for EX Series Switches on page 191
Upgrade and Downgrade Instructions for Junos OS Release 10.4 for EX Series Switches
on page 191
This section lists the limitations in Junos OS Release 10.4R1 for EX Series switches.

Access Control and Port Security

When you have configured more than 1024 supplicants on a single interface, 802.1X
authentication might not work as expected and the 802.1X process (
The RADIUS request sent by an EX Series switch contains both Extensible
Authentication Protocol (EAP) Identity Response and State attributes.
When an external RADIUS server goes offline and comes back online after some time,
subsequent captive portal authentication requests might fail until the
is restarted. As a workaround, configure the revert interval—the time after which to
revert to the primary server—and restart the

Class of Service

On EX8200 switches, classification of packets using ingress firewall filter rules with
forwarding-class and loss-priority configurations does not rewrite the DSCP or 802.1p
bits. Rewriting of packets is determined by the forwarding-class and loss-priority values
set in the DSCP classifier applied on the interface.
On EX4200 switches, the traffic is shaped at rates above 500 Kbps, even when the
shaping rate configured is less than 500 Kbps.

Firewall Filters

On EX3200 and EX4200 switches, when interface ranges or VLAN ranges are used in
configuring firewall filters, egress firewall filter rules take more than five minutes to
install.
On EX3200 and EX4200 switches, IGMP packets are not matched by user-configured
firewall filters.
Limitations in Junos OS Release 10.4 for EX Series Switches
authd daemon.
) might fail.
dot1xd
daemon
authd
181