Switching

Hey guys!

After applying the configuration [set switch-options interface ge-0/0/x.0 interface-mac-limit 1 packet-action shutdown] the interface did just that after (for testing) adding another MAC-adress (persistent-learning is enabled on that interface). It shut down, now the output of [show interfaces ge-0/0/x terse] shows link state "down", admin state "up". That goes for both physical and logical (/x and /x.0)

Now I suppose everything works as designed, but my question is: How do I get the interface back UP?  I honestly haven't worried about that, as it seemed unquestionable to me that there has to be an easy way to do it. Now, after some hours of research I'm disabused.  I've tried the following to no success:

• Deleting the entire switch-options interface config for that port, commited the config and then set it anew to [packet-action drop]
• Raised the mac-limit on that interface to 2 (
• Rebooting the switch with [packet-action drop] configuration already set
• Combing through interface level and switch-option level hierarchy to find some way to change the link-state
• Specs
  • Junos 24.1R3-S5
  • no port-security restrictions in the vlan that the interface is part of
  • J-Web interface available

So, the interface state is the same after all. Any help is greatly appreciated!

Hi Patontherack, 

I believe there are a couple of ways you can bring the interface back up, you can: 

1: Specify the port-error-disable command, with a timeout value. 

 - See Junos documentation: https://www.juniper.net/documentation/us/en/software/junos/security-services/topics/task/port-security-mac-limiting.html

2: Use the command: # clear ethernet-switching port-error

 - https://www.juniper.net/documentation/us/en/software/junos/security-services/topics/ref/command/clear-ethernet-switching-port-error-port-security.html

HTH,

Hey guys!

After applying the configuration [set switch-options interface ge-0/0/x.0 interface-mac-limit 1 packet-action shutdown] the interface did just that after (for testing) adding another MAC-adress (persistent-learning is enabled on that interface). It shut down, now the output of [show interfaces ge-0/0/x terse] shows link state "down", admin state "up". That goes for both physical and logical (/x and /x.0)

Now I suppose everything works as designed, but my question is: How do I get the interface back UP?  I honestly haven't worried about that, as it seemed unquestionable to me that there has to be an easy way to do it. Now, after some hours of research I'm disabused.  I've tried the following to no success:

• Deleting the entire switch-options interface config for that port, commited the config and then set it anew to [packet-action drop]
• Raised the mac-limit on that interface to 2 (
• Rebooting the switch with [packet-action drop] configuration already set
• Combing through interface level and switch-option level hierarchy to find some way to change the link-state
• Specs
  • Junos 24.1R3-S5
  • no port-security restrictions in the vlan that the interface is part of
  • J-Web interface available

So, the interface state is the same after all. Any help is greatly appreciated!