irb ifl disable does not remove EVPN arp entries.
Deactivate/delete irb interface removes arp-table correctly.
root@re0> Last login: Thu Nov 14 14:12:53 2024 from 10.104.57.36 --- JUNOS 23.4R2-S2.1 Kernel 64-bit JNPR-12.1-20240604.39c9257_buil root@re0> show evpn arp-table INET MAC Logical Routing Bridging address address interface instance domain X.X.X.X 00:00:00:00:00:01 irb.2 TEST-V2 __TEST-V2__
root@re0# set interfaces irb.2 disable [edit] root@re0# commit re0: configuration check succeeds re1: commit complete re0: commit complete [edit] root@re0# run show evpn arp-table INET MAC Logical Routing Bridging address address interface instance domain X.X.X.X. 00:00:00:00:00:01 irb.2 TEST-V2 __TEST-V2__ [edit] root@re0# deactivate interfaces irb.2 [edit] root@re0# commit re0: configuration check succeeds re1: commit complete re0: commit complete root@re0# run show evpn arp-table
The Junos routing architecture treats addresses assigned to disabled interfaces as “inactive” but does not immediately remove them from the routing table. Instead, the default behavior for such routes is to reject traffic. This occurs because the IRB IFL is still defined, and the IP address remains configured, even though the IRB interface is in a disabled state.
To ensure that the router does not “own” the IP address assigned to the IRB IFL, the IRB IFL must either be fully deactivated or deleted.