Outstanding Issues In Junos Os Release 10.4 For Ex Series Switches; Access Control And Port Security; Bridging, Vlans, And Spanning Trees - Juniper JUNOS OS 10.4 - RELEASE NOTES Release Note

JUNOS OS 10.4 Release Notes

Outstanding Issues in Junos OS Release 10.4 for EX Series Switches

184
Errata in Documentation for Junos OS Release 10.4 for EX Series Switches on page 191
Upgrade and Downgrade Instructions for Junos OS Release 10.4 for EX Series Switches
on page 191
The following are outstanding issues in Junos OS Release 10.4R1 for EX Series switches.
The identifier following the description is the tracking number in our bug database.
NOTE: Other software issues that are common to both EX Series switches
and M, MX, and T Series routers are listed in "Issues in Junos OS Release 10.4
for M Series, MX Series, and T Series Routers" on page 48.

Access Control and Port Security

On EX4200 switches, if you use the EAP-TTLS authentication protocol to authenticate
802.1X supplicants when configuring RADIUS, and if the supplicant sends the wrong
credentials, the host never starts because RADIUS does not send a failure message to
the switch. There is no known workaround. [PR/506918]
If the RADIUS server fails to authenticate a routed VLAN interface (RVI) configured
with 802.1X authentication in single supplicant mode and server fail fallback, the
interface is not authenticated with server fail fallback. [PR/566537]

Bridging, VLANs, and Spanning Trees

On EX4200 switches, if you have configured bridge protocol data unit (BPDU) protection
on all interfaces and disabled the panning-tree protocol, BPDU protection might not
work. [PR/544461]
When the primary redundant trunk group (RTG) interface is disabled, causing an RTG
switchover, MAC entries on the upstream switches are refreshed. However, when the
primary RTG link is enabled, the MAC entries are not refreshed on the upstream switches.
[PR/555158]
If you enable all VRRP sessions simultaneously on a switch with a large number (on
the order of 200 or more) of VRRP configurations, RSTP convergence might not occur.
As a workaround, do not enable all VRRP sessions simultaneously if the switch's VRRP
configuration is large. [PR/556114]
When a switch is running Virtual Routing Redundancy Protocol (VRRP) and you enable
or disable a large number (on the order of 50 or more) of routed VLAN interfaces (RVIs),
in some cases, the STP topology might change for a short period of time during the
commit process. [PR/564689]
Copyright © 2010, Juniper Networks, Inc.