Description

irb ifl disable does not remove EVPN arp entries.

Deactivate/delete irb interface removes arp-table correctly.

 

Symptoms

 

root@re0> 
Last login: Thu Nov 14 14:12:53 2024 from 10.104.57.36
--- JUNOS 23.4R2-S2.1 Kernel 64-bit  JNPR-12.1-20240604.39c9257_buil
root@re0> show evpn arp-table 
INET                MAC                Logical            Routing      Bridging
address             address            interface          instance     domain
X.X.X.X       00:00:00:00:00:01  irb.2              TEST-V2       __TEST-V2__ 

 

root@re0# set interfaces irb.2 disable 

[edit]
root@re0# commit 
re0: 
configuration check succeeds
re1: 
commit complete
re0: 
commit complete

[edit]
root@re0# run show evpn arp-table 
INET                MAC                Logical            Routing      Bridging
address             address            interface          instance     domain
X.X.X.X.           00:00:00:00:00:01  irb.2             TEST-V2       __TEST-V2__ 

[edit]
root@re0# deactivate interfaces irb.2 

[edit]
root@re0# commit 
re0: 
configuration check succeeds
re1: 
commit complete
re0: 
commit complete


root@re0# run show evpn arp-table 


 

Solution

The Junos routing architecture treats addresses assigned to disabled interfaces as “inactive” but does not immediately remove them from the routing table. Instead, the default behavior for such routes is to reject traffic. This occurs because the IRB IFL is still defined, and the IP address remains configured, even though the IRB interface is in a disabled state.

To ensure that the router does not “own” the IP address assigned to the IRB IFL, the IRB IFL must either be fully deactivated or deleted.

Modification History

2024-12-31 : Article Created