Observing traffic on an interface that's supposed to be shut down by storm control
Storm control enables the switch to monitor traffic levels and to drop broadcast, multicast, and unknown unicast packets when a specified traffic level.As an alternative to having the switch drop packets, you can configure it to shut down interfaces or temporarily disable interfaces.
Here is the configuration:
storm-control-profiles X {
all {
bandwidth-level Y;
}
action-shutdown;
If you are observing traffic on an interface that's supposed to be shut down by storm control, this is because it is in a "soft-shutdown" state. You can change this to "hard-shutdown" if desired. Details are in the below link
https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/statement/interface-shutdown-action-edit-switch-options.html
Note that the default behavior is a soft shutdown.
https://www.juniper.net/documentation/us/en/software/junos/security-services/topics/concept/rate-limiting-storm-control-understanding.html