Hi,

> On 09 Dec 2016, at 14:45, Jiri Lunacek <[email protected] 
> <mailto:[email protected]>> wrote:
> 
> Has anyone found a way how to cache negative ARP results in JunOS?

Nope :(. We ran into issues before at CCC Congress (Hamburg) in 2013 when using 
Ruckus WiFi. We ended up replacing the Juniper router for WiFi with a Linux 
Router which *could* do negative ARP caching.

These days we’re using Aruba WiFi gear which can do ARP-proxying and doesn’t 
flood ARP requests for IPs it doesn’t know and answers on-behalf of the clients.

> The only way of working around this I could come up with was defining discard 
> routes for all interface prefixes and then importing a host route for every 
> active address in our network. And that is a last resort I would rather not 
> use.

You could look at AMS-IX’s ARP-sponge: https://ams-ix.net/downloads/arpsponge/ 
<https://ams-ix.net/downloads/arpsponge/> - not sure if that would solve your 
CPU issues though, but at least it wouldn’t have to ARP anymore once the table 
has been filled.

— Arjan

_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to