We are seeing a large volume of the follow message "PFE_NH_RESOLVE_THROTTLED: Next-hop resolution requests from interface 67 throttled" in the router logs.
I am struggling to understand why this is happening. The explanation from juniper for this system message, shown below, is some what cryptic. What is throwing me off here is the mention of ARP whereas all of the interfaces being throttled are configured with /30 subnets and whilst they are Ethernet interfaces only provide connectivity to a single host. I would have expected the throttling to occur on an interface providing access to multiple hosts. Does anyone have any experience or opinion on this error message? PFE_NH_RESOLVE_THROTTLED System Log Message PFE_NH_RESOLVE_THROTTLED: Next-hop resolution requests from interface logical-interface-index throttled Description The Packet Forwarding Engine throttled next-hop resolution requests from the indicated interface, because the high number of requests might constitute an attempted denial-of-service (DoS) attack. Examples of events that generate next-hop resolution requests include an attempt to forward a packet without an Address Resolution Protocol (ARP) entry and receiving a multicast data packet with no matching route. Normally, the Packet Forwarding Engine forwards the requests to the Routing Engine. Type Event: This message reports an event, not an error Severity info <p class=MsoNormal><span lang=EN-GB style='font-size:10.0pt;font-family:"Arial","sans-serif"; color:#808080'> Note:<br> This message is for the named person's use only. It may contain confidential, proprietary or legally privileged information. No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. Irish Broadband and any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorized to state them to be the views of any such entity. </span> <em><span lang=EN-GB style='font-size:7.5pt;font-family:"Arial","sans-serif"; color:#808080'> Irish Broadband Internet Services Ltd, Registered in Ireland, Number: 357181, Registered Office: Burton Court, Burton Hall Road, Sandyford Industrial Estate, Dublin 18.</span></em><span lang=EN-GB><o:p></o:p></span></p> _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
