<HTML>
<HEAD>
<TITLE>Re: [AusNOG] Older Juniper J series routers - time bomb</TITLE>
</HEAD>
<BODY>
<FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Just great, just great.<BR>
How to win friends..........not.<BR>
<BR>
<BR>
On 29/03/14 4:49 PM, "Skeeve Stevens" <<a href="skeeve+ausnog@eintellegonetworks.com">skeeve+ausnog@eintellegonetworks.com</a>> wrote:<BR>
<BR>
</SPAN></FONT><BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Some info from Juniper:<BR>
<BR>
---<BR>
</SPAN></FONT><SPAN STYLE='font-size:11pt'><FONT FACE="Times New Roman"><BR>
<B>FAQs:<BR>
</B></FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Times New Roman"><B>Q: What is the nature of this issue?<BR>
</B></FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Times New Roman">Junos software licenses are required to enable certain Junos software features. When a license expires, the features that are licensed on a device that is running an impacted version of Junos will cease to operate.<BR>
</FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Times New Roman"><B>Q: What should a customer do if they believe they have been, or might be, impacted by this issue?<BR>
</B></FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Times New Roman">Customers should contact JTAC or their Juniper Service Engineer, following standard processes. Fixes for the issue are available, and the JTAC team can assist in proactive remediation, as well.<BR>
</FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Times New Roman"><B>Q: What are the symptoms of this issue? How will a customer know if they are impacted by it?<BR>
</B></FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Times New Roman">There are a wide variety of symptoms. The indicator of this issue is an “expired certificate” message in the syslog. Diagnostic details are found in the Technical Service Bulletin (TSB16366).<BR>
</FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Times New Roman"><B>Q: Does this issue impact all versions of Junos?<BR>
</B></FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Times New Roman">This primarily impacts Junos 9.6 and older where the licensed feature will stop working. For Junos 10.0 - 11.4, any new or renewed licenses (after 24/March/2014) will require the installation of a certificate on the device. Junos 12.1 and above are NOT impacted.<BR>
</FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Times New Roman"><B>Q: Has JTAC identified a fix?<BR>
</B></FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Times New Roman">JTAC has identified fixes for each impacted version of Junos and has released TSB16366.<BR>
</FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Times New Roman"><B>Q: Has this issue been resolved for future releases of Junos?<BR>
</B></FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
</FONT><FONT FACE="Times New Roman">Yes. Junos 12.1 and higher are not impacted. Any new 11.4 releases will have the relevant certificate added as part of the Junos image.<BR>
<BR>
<BR>
---<BR>
</FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
<BR>
<BR>
<BR>
On 29/03/2014 9:47 AM, "Tom Storey" <<a href="tom@snnap.net">tom@snnap.net</a>> wrote:<BR>
</FONT></SPAN><BLOCKQUOTE><SPAN STYLE='font-size:11pt'><FONT FACE="Calibri, Verdana, Helvetica, Arial">Juniper have released a fix.<BR>
<BR>
<a href="http://kb.juniper.net/InfoCenter/index?page=content&id=TSB16366">http://kb.juniper.net/InfoCenter/index?page=content&id=TSB16366</a><BR>
<BR>
Ive applied it to my J2300 running 9.3r4.4, and waiting patiently for<BR>
my FPC to come back...<BR>
<BR>
On 27 March 2014 16:57, Tom Storey <<a href="tom@snnap.net">tom@snnap.net</a>> wrote:<BR>
> Perusing the j-nsp list I came across this thread:<BR>
><BR>
> <a href="http://www.gossamer-threads.com/lists/nsp/juniper/50450">http://www.gossamer-threads.com/lists/nsp/juniper/50450</a><BR>
><BR>
> If youre running any older J series (i.e. x300), or were thinking of<BR>
> digging them out to use for some purpose, you might be in for a<BR>
> slightly rude shock.<BR>
><BR>
> Otherwise its a "sad" thing to see. I have a J2300 in my lab at home<BR>
> which works great in such a role, it would be a shame to have to ditch<BR>
> it due to an expired certificate.<BR>
_______________________________________________<BR>
AusNOG mailing list<BR>
<a href="AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><BR>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a><BR>
</FONT></SPAN></BLOCKQUOTE><SPAN STYLE='font-size:11pt'><FONT FACE="Calibri, Verdana, Helvetica, Arial"><BR>
<HR ALIGN=CENTER SIZE="3" WIDTH="95%"></FONT></SPAN><FONT SIZE="2"><FONT FACE="Consolas, Courier New, Courier"><SPAN STYLE='font-size:10pt'>_______________________________________________<BR>
AusNOG mailing list<BR>
<a href="AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><BR>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a><BR>
</SPAN></FONT></FONT></BLOCKQUOTE>
</BODY>
</HTML>