no-mac-ip-learning
Syntax
no-mac-ip-learning;
Hierarchy Level
[edit bridge-domains <varname>name</varname> bridge-options], [edit vlans <varname>name</varname> switch-options], [edit routing-instances <varname>name</varname> bridge-domains <varname>name</varname> bridge-options], [edit routing-instances <varname>name</varname> protocols evpn], [edit routing-instances <varname>name</varname> switch-options], [edit routing-instances <varname>name</varname> vlans <varname>name</varname> switch-options]
Description
Use the no-mac-ip-learning statement to disable dynamic MAC-IP binding
learning from data plane Address Resolution Protocol (ARP) and Neighbor Discovery
Protocol (NDP) traffic on a VLAN. When configured, the device does not create local
MAC-IP entries based on observed ARP requests, ARP replies, Neighbor Solicitations, or
Neighbor Advertisements. This enables the VLAN to operate as a pure Layer 2 segment
without maintaining MAC-IP bindings learned from host traffic.
You may want to use this feature in EVPN bridge-overlay deployments where routing occurs outside the EVPN domain, or in environments with very large numbers of MAC and IP endpoints where ARP processing and MAC-IP learning can consume significant system resources.
no-arp-suppression statement must be
configured along with the no-mac-ip-learning statement.Behavior When Configured
When no-mac-ip-learning is configured:
-
Dynamic local MAC-IP learning from data plane ARP and NDP packets is disabled.
-
ARP requests and NDP Neighbor Solicitation packets continue to be flooded within the VLAN because
no-arp-suppressionis required. -
Remote MAC-IP bindings learned through EVPN control plane signaling are still accepted.
-
Static MAC-IP bindings configured through the CLI continue to function normally.
-
MAC-IP entries associated with local IRB interface addresses continue to be installed.
As a result, the device does not populate local Ethernet switching or EVPN MAC-IP tables from ARP and NDP traffic, reducing ARP processing for the configured VLAN.
Default Behavior
By default, Junos OS and Junos OS Evolved enable proxy ARP and proxy NDP, ARP suppression and NDP suppression, and MAC-IP learning.
set
routing-instances instance-name service-type
vlan-bundle the behavior is equivalent to having both
no-arp-suppression and no-mac-ip-learning
enabled. Consequently, vlan-bundle service types do not perform
MAC-IP learning from ARP and NDP traffic by default.Usage Guidelines
Configure no-mac-ip-learning together with
no-arp-suppression in the following situations:
-
EVPN bridge-overlay deployments where routing is performed outside the EVPN domain.
-
VLANs containing extremely large numbers of MAC and IP endpoints.
-
Environments experiencing ARP processing overhead, delayed ARP replies, or resource consumption caused by large MAC-IP tables.
Required Privilege Level
routing—To view this statement in the configuration.
routing-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 20.3 as a hidden command .
Statement unhidden in Junos OS Release 26.1R1.