6.3.0r10 Release Notes - Juniper Networks

ScreenOS 6.3.0 Release Notes
32
• 547117—Packets were dropped by anti-spoofing screening option on the backup NSRP
firewall.
• 547750—[IPv6] UDP checksum was zero.
• 547943—[NS5000] The increasing CPU4 drop counters affected the MGT3 platform
only.
• 548054—ISG and NS5000 platforms dropped pass-through ESP fragmented packets
with total size around 1700 bytes.
• 548294—When the set flow reverse-route clear always command was configured, the
packet did not get arp resolved and was queued twice.
• 548449—Firewall displayed a Trace dump when get config command was run with
OSPFv3 and IPv6 enabled.
• 549614—Firewall failed when details for a peer gateway in a manual VPN configuration
were accessed.
• 549816—Under certain circumstances, the firewall core dumped and rebooted
unexpectedly.
• 558643—With FIPS enabled, device failed to boot after upgrading to 6.3r5.
Routing
• 441711—RIPv2 failed to advertise routes to the neighbors after few hours of operation
in a hub-and-spoke VPN setup.
• 533910—RIP updates with more than 825 routes were dropped.
• 535615—OSPF neighbor on the VPN tunnel went down when the OSPF neighbor
session was incorrectly formed on the loopback interface rather than the tunnel
interface.
• 543671—BGP peering failed when force-reconnect option was enabled under certain
configuration conditions.
• 544754—Inter-area route was not removed from routing table even though an intra-area
route was learnt and existed in the OSPF database.
Security
• 540983—SYN packet sent to the server by the firewall after triggering the SYN-proxy
had an incorrect checksum.
VoIP
• 530047—SIP ALG was unable to handle the SIP calls that needed cross vsys policy
search.
VPN
• 508798—Firewall utilized very high memory when VPN was configured.
Copyright © 2012, Juniper Networks, Inc.