I'm having trouble understanding why I would be seeing Storm Control drops on a VFI pseudowire under a l2vpn bridge domain. This is an ASR 9010 router running IOS XR version 5.3.3. From everything that I've read, Storm Control is unsupported for VFI pseudowires, as there is no option to configure it. Despite that, there are counters for it when looking at the bridge domain details. I know you're able to configure it globally within the bridge domain (which should encompass everything in it), but this particular bridge domain doesn't have storm control enabled (although it is setup on one of the AC's within it).   If you look at the output below, you will see that Storm control is clearly disabled for the bridge domain, so how is this possible?   Bridge group: 16951, bridge-domain: 16951, id: 250, state: up, ShgId: 0, MSTi: 0 Coupled state: disabled MAC learning: enabled MAC withdraw: enabled MAC withdraw for Access PW: enabled MAC withdraw sent on: bridge port down (legacy) MAC withdraw relaying (access to access): disabled Flooding: Broadcast & Multicast: enabled Unknown unicast: enabled MAC aging time: 300 s, Type: inactivity MAC limit: 5000, Action: limit, no-flood, Notification: syslog MAC limit reached: no MAC port down flush: enabled MAC Secure: enabled, Logging: enabled, Action: none Split Horizon Group: none Dynamic ARP Inspection: disabled, Logging: disabled IP Source Guard: disabled, Logging: disabled DHCPv4 snooping: disabled IGMP Snooping: enabled IGMP Snooping profile: none MLD Snooping profile: none Storm Control: disabled Bridge MTU: 9000 MIB cvplsConfigIndex: 251 Filter MAC addresses: P2MP PW: disabled Create time: 05/03/2019 10:22:45 (2w6d ago) No status change since creation ACs: 1 (1 up), VFIs: 1, PWs: 4 (3 up), PBBs: 0 (0 up) PW: neighbor [Omitted-1], PW ID 16952, state is up ( established ) PW class EoMPLS, XC ID 0xc000045e Encapsulation MPLS, protocol LDP Source address [Omitted-1] PW type Ethernet, control word enabled, interworking none Sequencing not set PW Status TLV in use MPLS Local Remote ------------ ------------------------------ ------------------------- Label 289924 158 Group ID 0xfa 0x0 Interface 16951 unknown MTU 9000 9000 Control word enabled enabled PW type Ethernet Ethernet VCCV CV type 0x2 0x2 (LSP ping verification) (LSP ping verification) VCCV CC type 0x7 0x3 (control word) (control word) (router alert label) (router alert label) (TTL expiry) ------------ ------------------------------ ------------------------- Incoming Status (PW Status TLV): Status code: 0x0 (Up) in Notification message MIB cpwVcIndex: 3221226590 Create time: 05/03/2019 10:22:45 (2w6d ago) Last time status changed: 05/03/2019 10:22:45 (2w6d ago) MAC withdraw messages: sent 0, received 6 Static MAC addresses: Statistics: packets: received 4082631 (unicast 4082608), sent 5587326 bytes: received 4138600097 (unicast 4138598429), sent 1136882733 MAC move: 2 Storm control drop counters: packets: broadcast 0, multicast 114, unknown unicast 0 bytes: broadcast 0, multicast 12885, unknown unicast 0 DHCPv4 snooping: disabled IGMP Snooping profile: none   l2vpn bridge group 16951 bridge-domain 16951 mac aging time 300 ! withdraw state-down limit maximum 5000 action no-flood ! secure action none logging ! ! mtu 9000 interface Bundle-Ether901.223 storm-control unknown-unicast pps 6000 storm-control multicast pps 6000 storm-control broadcast pps 200 ! vfi 16951 vpn-id 16951 autodiscovery bgp rd auto route-target 26554:16951 control-word ! neighbor [Ommited-1] pw-id 16952 pw-class EoMPLS ! neighbor [Ommited-2] pw-id 16952 pw-class EoMPLS ! ! ! ! !   MLD Snooping profile: none ... View more

Hey guys,   I've been running into an issue and wondering if anyone else has experienced the same problem. I have an ASR 9006 running IOS XR 5.3.3 in my lab and I've created a test bridge domain. Within that bridge domain, under the access circuit, I've configured a mac limit of 50 with the 'no flood' action. When this limit is hit, mac address learning is disabled as expected, but the problem is that its never re-enabled. If i stop all traffic on that interface, the mac learning remains disabled indefinitely until I change the configuration to either remove mac limiting or change the action to none. I would like to think that at some point it it would back off and re-enable mac learning after seeing that the mac address count has dropped below the threshold. Any ideas?   RP/0/RSP0/CPU0:LAB-ASR9006-01#sho l2vpn bridge-domain bd-name 9 det     AC: GigabitEthernet0/2/0/9.300, state is up       Type VLAN; Num Ranges: 1       VLAN ranges: [300, 300]       MTU 8986; XC ID 0x208000c; interworking none       MAC learning: disabled (MAC-limit action)       Flooding:         Broadcast & Multicast: enabled         Unknown unicast: disabled (MAC-limit action)       MAC aging time: 300 s, Type: inactivity       MAC limit: 50, Action: limit, no-flood, Notification: syslog       MAC limit reached: yes       MAC port down flush: enabled       MAC Secure: disabled, Logging: disabled       Split Horizon Group: none       Dynamic ARP Inspection: disabled, Logging: disabled       IP Source Guard: disabled, Logging: disabled       DHCPv4 snooping: disabled       IGMP Snooping: enabled       IGMP Snooping profile: none       MLD Snooping profile: none       Storm Control: bridge-domain policer       Static MAC addresses:       Statistics:         packets: received 1437063 (multicast 189407949, broadcast 44127, unknown unicast 0, unicast 0), sent 18         bytes: received 301982330 (multicast 40280180924, broadcast 3293496, unknown unicast 0, unicast 0), sent 1008         MAC move: 0       Storm control drop counters:         packets: broadcast 0, multicast 0, unknown unicast 0         bytes: broadcast 0, multicast 0, unknown unicast 0       Dynamic ARP inspection drop counters:         packets: 0, bytes: 0       IP source guard drop counters:         packets: 0, bytes: 0   RP/0/RSP0/CPU0:LAB-ASR9006-01#sho run l2vpn bridge group 9 Mon Feb 5 06:23:53.371 EST l2vpn bridge group 9 bridge-domain 9 mac aging time 300 ! withdraw state-down ! mtu 9000 interface GigabitEthernet0/2/0/9.300 mac limit maximum 50 action no-flood notification syslog ! ! ! vfi 9 vpn-id 9 autodiscovery bgp rd auto route-target 9:9 ! neighbor 192.168.2.100 pw-id 91 ! neighbor 192.168.2.200 pw-id 91 ! ! routed interface BVI9 ! ! !  RP/0/RSP0/CPU0:LAB-ASR9006-01#sho l2vpn forwarding bridge-domain 9:9 loc 0/2/CPU0 Mon Feb  5 06:29:21.345 EST                                  Bridge       MAC Bridge-Domain Name               ID     Ports addr    Flooding Learning State     -------------------------------- ------ ----- ------- -------- -------- --------- 9:9                              0      4     0       Enabled  Enabled  UP            ... View more