Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

mac-ip-limit

date_range 16-Jan-25

Syntax

content_copy zoom_out_map
mac-ip-limit mac-ip-limit;

Hierarchy Level

content_copy zoom_out_map
[edit logical-systems name protocols evpn],
[edit protocols evpn]

Description

Set a user-defined limit on the number of IP addresses associated with a MAC address that a device can learn. If you don't configure this option, by default the device can learn a maximum of 200 IP addresses for a MAC address per bridge domain.

After the device reaches the limit for a bridge domain, the device stops adding new IP addresses to the EVPN MAC-IP database for that MAC address. The device records a system log error message such as the following:

content_copy zoom_out_map
Sep 12 00:25:11  SBDV03LF05 rpd[11243]: EVPN_MAC_IP_THRESHOLD_REACHED: EVPN MAC IP threshold reached

If the device receives a new remote EVPN Type 2 MAC-IP route that associates a new IP address with a MAC address that has reached the MAC-IP limit, the device:

  • Adds the route to the routing table.

  • Does not add the route to the EVPN MAC-IP database.

If the device locally learns a new IP address associated with a local MAC address that has reached the MAC-IP limit:

  • The Layer 2 (L2) address learning daemon, l2ald, can process the new MAC-IP association and add it to the Ethernet switching table.

  • The Layer 3 (L3) routing daemon, rpd, doesn't add the association in its routing table.

  • The device doesn't add the IP address to the EVPN MAC-IP database.

When the count of IP addresses associated with a MAC address falls below the limit again, the device starts adding new IP addresses to the EVPN MAC-IP database for that MAC address. The device records a system log recovery message such as the following:

content_copy zoom_out_map
Sep 12 00:25:20  SBDV03LF05 rpd[11243]: EVPN_MAC_IP_THRESHOLD_CLEARED: EVPN MAC IP threshold cleared
Note:

If you want to globally limit the number of MAC-IP bindings a device can learn, use the global-mac-ip-limit statement at the [edit protocols l2-learning] hierarchy level.

Options

mac-ip-limit

(Required) Maximum number of IP addresses that can be associated with an IP address per bridge domain in the EVPN MAC-IP address bindings database.

  • Range: 1 through 5000

    Note:

    In most use cases, you don’t need to change the default limit. If you want to change the default limit, we recommend that you set this value to no more than 300 IP addresses per MAC address per bridge domain. Otherwise, you might observe the rpd process on the device consumes a very large number of CPU cycles, which can degrade system performance.

  • Default: 200

Required Privilege Level

routing—To view this statement in the configuration.

routing-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS and Junos OS Evolved Release 24.1R1.

footer-navigation