Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[NFX] SR-IOV VNF Interface stays up even though the Physical Interface mapped to it is down



Article ID: KB36178 KB Last Updated: 22 Aug 2020Version: 1.0

A Virtual-Network-Function (VNF) has been created on the NFX.  The VNF interface is created, mapped to hsxe0, using virtual-functions, so it is using SR-IOV.  The VNF is configured for VRRP, and when the physical interface goes down, it is expected that the VNF interface would go down, so that VRRP can fail over to the peer device.


When the physical interface, mapped to the SR-IOV VNF Interface is disconnected, the VNF Interface does not go down.  In the case where VRRP is configured on the VNF device, since the VNF Interface does not go down, VRRP will not fail over to the peer.


If a VNF interface is configured with SR-IOV, when the physical interface bound to it goes down, the SR-IOV interface will continue to stay up.  This is because the SR-IOV NIC is an internal interface, and it always stay up.  The Virtual-Function will stay up, hence the mapped VNF interface will stay up.  Since the mapped VNF SR-IOV interface stays up, VRRP failover will not occur. 

The only solution is to change the configuration to OVS, and configure the peer-interfaces feature that will map a VNF interface to the front panel physical interface.  Once this is configured, when the front panel physical interface goes down, the VNF Interface mapped to it will also go down.


set virtual-network-functions vsrx interfaces eth2 mapping peer-interfaces ge-0/0/1

This will map front panel physical interface ge-0/0/1 to the VNF Interface vsrx_eth2

This feature is available only on NFX-2 software, running Junos 18.1 through 19.1.

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search