Description

We cannot apply the filter policy within the Junos OS version 23.4R2-S5.5-EVO.

This is some configuration of the old version 23.1R1 ( filter policy can applied perfectly).

Symptoms

root@JTAC# commit

[edit routing-instances testing-filter]

'interface et-0/0/24.234'

EVPN: Interface..... et-0/0/24.234 could not be created from the configuration

error: configuration check-out failed

Solution

I tried in lab & found the same error while commit. It worked after removing below config.

 

delete routing-instances testing-filter interface et-0/0/24.234

 

You need to remove the interface 'et-0/0/24.234' from routing-instance.

Since this is part of vlans config in instance, the service should come up fine.

 

 

I am sharing the issue & resolution from lab.

 

Issue in lab:

 

labroot@H20-47# show routing-instances testing-filter | display set                      

set routing-instances testing-filter instance-type mac-vrf

set routing-instances testing-filter protocols evpn encapsulation mpls

set routing-instances testing-filter service-type vlan-based

set routing-instances testing-filter interface et-0/0/24.234

set routing-instances testing-filter vrf-target target:130000L:234

set routing-instances testing-filter vlans testing-filter vlan-id 234

set routing-instances testing-filter vlans testing-filter interface et-0/0/24.234

 

[edit]

labroot@H20-47# set interfaces et-0/0/24 unit 234 family ethernet-switching filter input police-100m-ifl 

 

[edit]

labroot@H20-47# set interfaces et-0/0/24 unit 234 family ethernet-switching filter output police-100m-ifl  

 

[edit]

labroot@H20-47# commit 

[edit routing-instances testing-filter]

 'interface et-0/0/24.234'

  EVPN: Interface..... et-0/0/24.234 could not be created from the configuration

error: configuration check-out failed

 

 

Resolution in lab:

 

labroot@H20-47# delete routing-instances testing-filter interface et-0/0/24.234 

 

[edit]

labroot@H20-47# show | compare 

[edit interfaces et-0/0/24 unit 234]

+  family ethernet-switching {

+    filter {

+      input police-100m-ifl;

+      output police-100m-ifl;

+    }

+  }

[edit routing-instances testing-filter]

-  interface et-0/0/24.234;

 

[edit]

labroot@H20-47# commit 

commit complete

 

 

Final Config.

 

labroot@H20-47> show configuration routing-instances testing-filter | display set 

set routing-instances testing-filter instance-type mac-vrf

set routing-instances testing-filter protocols evpn encapsulation mpls

set routing-instances testing-filter service-type vlan-based

set routing-instances testing-filter vrf-target target:130000L:234

set routing-instances testing-filter vlans testing-filter vlan-id 234

set routing-instances testing-filter vlans testing-filter interface et-0/0/24.234

 

labroot@H20-47> show configuration interfaces et-0/0/24 | display set 

set interfaces et-0/0/24 flexible-vlan-tagging

set interfaces et-0/0/24 encapsulation flexible-ethernet-services

set interfaces et-0/0/24 unit 234 encapsulation vlan-bridge

set interfaces et-0/0/24 unit 234 vlan-id 234

set interfaces et-0/0/24 unit 234 family ethernet-switching filter input police-100m-ifl

set interfaces et-0/0/24 unit 234 family ethernet-switching filter output police-100m-ifl

Modification History

2025-08-01 : Article Created